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METHODS FOR EFFICIENT EARLY PROTOCOL DETECTION 
BACKGROUND OF THE INVENTION 

5 

I. Field of the Invention 

This invention generally relates to the field of wireless 
communications. More particularly, the present invention relates to a 
novel method and system for performing early protocol and configuration 
10 message detection without having to unframe entire PPP packets. 



II. Description of Related Art 

Recent innovations in wireless communication and computer-related 
technologies, as well as the unprecedented growth of Internet subscribers, 

15 have paved the way for mobile computing. In fact, the popularity of mobile 
computing has placed greater demands on the current Internet 
infrastructure to provide mobile users with more support. A crucial part of 
meeting these demands and providing users with the necessary support is the 
use of Code Division Multiple Access (CDMA) technology in wireless 

20 communication systems. 

CDMA is a digital radio-frequency (RF) channelization technique 
defined in the Telecommunications Industry Association/Electronics 
Industries Association Interim Standard-95 (TIA/EIA IS-95), entitled "MOBILE 
STATION-BASE STATION COMPATIBILITY STANDARD FOR DUAL- 

25 MODE WIDEBAND SPREAD SPECTRUM CELLULAR SYSTEM", published 
in July 1993 and herein incorporated by reference. Wireless communication 
systems employing this technology assign a unique code to communication 
signals andspread these communication signals across a common (wideband) 
spread spectrum bandwidth. As long as the receiving apparatus in a CDMA 

30 system has the correct code, it can successfully detect and select its 
communication signal from the other signals concurrently transmitted over 
the same frequency band The use of CDMA produces an increase in system 
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traffic capacity, improves overall call quality and noise reduction, and provides 
a reliable transport mechanism for data service traffic. 

FIG. 1 illustrates the basic elements of such a wireless data 
communication system 100. Artisans of ordinary skill will readily appreciate 
5 that these elements, or their interfaces, may be modified, augmented, or 
subjected to various standards known in the art, without limiting their 
scope or function. System 100 allows a mobile terminal equipment, TE2 
device 102 (e.g., the terminal equipment such as laptop or palmtop 
computer) to communicate with an Interworking Function (IWF) 108. 

10 System 100 includes a wireless communication device, MT2 device 104 (e.g., 
wireless telephone), and a Base Station/Mobile Switching Center (BS/MSC) 
106. The IWF 108 serves as a gateway between the wireless network and 
other networks, such as the Public Switched Telephone Network or wireline 
packet data networks providing Internet- or Intranet-based access. 

15 As shown in FIG. 1, the IWF 108 is coupled to the BS/MSC 106, via 

the L interface. Often the IWF 108 will be co-located with the BS/MSC 106. 
The TE2 device 102 is electronically coupled to the MT2 device 104 via the 
R m interface. The MT2 device 104 communicates with the BS/MSC 106 via 
the wireless interface U m . The TE2 device 102 and the MT2 device 104 may 

20 be integrated into a single unit or may be separated out, as in the case of an 
installed mobile phone unit in which a laptop is the TE2 device 102 and the 
transceiver is the MT2 device 104. It is important to note that, as indicated 
by FIG. 2, the combination of the TE2 device 102 and the MT2 device 104, 
whether integrated or separate, is generally referred to as a mobile station 

25 (MS) 103. 

Other support is made possible by applying various well-known 
protocols to control, manage, or otherwise facilitate different aspects of 
wireless communications. For example, the life-blood of the Internet 
infrastructure, the Internet Protocol (IP), has been incorporated in wireless 
30 communications to accommodate packet-oriented services. The IP protocol 
specifies the addressing and routing of packets (datagrams) between host 
computers and is defined in Request For Comment 791 (RFC 791) entitled, 
"INTERNET PROTOCOL DARPA INTERNET PROGRAM PROTOCOL 
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SPECIFICATION/' published September 1981, and herein incorporated by 
reference. 

The IP protocol is a network layer protocol that encapsulates data into 
IP packets for transmission. Addressing information is affixed to the header 
5 of the packet. IP headers (e.g., IP version 4) contain 32-bit addresses that 
identify the sending and receiving hosts. These addresses are used by 
intermediate routers to select a path through the network for the packet 
towards its ultimate destination at the intended address. Thus, the IP 
protocol allows packets originating at any Internet node in the world to be 

10 routed to any other Internet node in the world, given that the originating 
party knows the IP address of the destination party. 

Another well-known protocol which has been incorporated in 
wireless communications systems is the Point-to -Point Protocol (PPP) 
protocol, which provides, inter alia, Internet access. The PPP protocol is 

15 described in detail in Request for Comments 1661 (RFC 1661), entitled "THE 
POINT-TO-POINT PROTOCOL (PPP)", published July 1994 and herein 
incorporated by reference. 

Essentially, the PPP protocol specifies a method for transporting multi- 
protocol datagrams over point-to-point links and contains three main 

20 components: a method of encapsulating multi-protocol datagrams over 
serial links; a Link Control Protocol (LCP) for establishing, testing, 
configuring, and maintaining a data link connection; and a family of 
Network Control Protocols (NCPs) for establishing and configuring different 
network-layer protocols. 

25 In an effort to provide a host of services on wireless communication 

systems, various standards have been developed to accommodate the 
wireless data transmission between the TE2 device 102 and the IWF 108. For 
example, the TIA/ETA IS-707.5 standard, entitled "DATA SERVICE 
OPTIONS FOR WIDEBAND SPREAD SPECTRUM SYSTEMS: PACKET 

30 DATA SERVICES," published February 1998, and herein incorporated by 
reference, defines requirements for support of packet data transmission 
capability on TIA/EIA IS-95 systems and specifies a suite of packet data bearer 
services. Similarly, the TIA/EIA IS-707-A.5 standard, entitled "DATA 
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SERVICE OPTIONS FOR SPREAD SPECTRUM SYSTEMS: PACKET DATA 
SERVICES," and the TIA/EIA IS-707-A.9 standard, entitled "DATA SERVICE 
OPTIONS FOR SPREAD SPECTRUM SYSTEMS: HIGH-SPEED PACKET 
DATA SERVICES/' both published in March 1999 and incorporated by 
5 reference, also define requirements for packet data transmission support on 
TIA/EIA IS-95 systems. 

These standards provide that certain packet data service options that 
may be used to communicate between the TE2 device 102 and IWF 108 via 
BS/MSC 106. In doing so, IS-707.5 introduces the Network Model, which 

10 details the packet data protocol requirements for the R ni interface, U m 
interface, and the L interface. Under this model, two separate PPP links are 
provided at the data link layer: a first PPP link (PPP R ) provides the data link 
layer between the TE2 device 102 and the MT2 device 104 (i.e., across the R m 
interface), and a second PPP link (PPP L ,), independent of the first, provides 

15 the data link layer between the MT2 device 104 and the IWF 108 (i.e., across 
the U m and L interfaces). 

The separate and independent PPP links help support "transparent 
mobility"; that is, the TE2 device 102 should experience seamless and 
transparent service, regardless of time and its current IWF 108 point-of- 

20 attachment. As such, the TE2 device 102 should not be affected by location 
changes. For example, the TE2 device 102 should not be affected from PPP 
renegotiations occurring on the U m link, such as when MT2 device 104 
attempts to attach to a different IWF 108. Thus, the Network Model operates 
to isolate the PPP R link from the TPP U link in order to prevent changes on 

25 the U m link from affecting the R m link. In other words, the PPP LI link can be 
renegotiated without forcing the PPP K link to be renegotiated. 

FIG. 2 illustrates the protocol stacks in each entity of the IS-707.5 
Network Model. At the far left of FIG. 2 is a protocol stack, shown in 
conventional vertical format, depicting the protocol layers running on the 

30 TE2 device 102 (e.g., the mobile terminal, laptop or palmtop computer). The 
TE2 device 104 protocol stack is illustrated as being logically connected to the 
MT2 device 104 protocol stack over the R ni interface. The MT2 device 104, is 
illustrated as being logically connected to the BS/MSC 106 protocol stack 
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over the U m interface. The BS/MSC 106 protocol stack is, in turn, shown as 
being logically connected to the IWF 108 protocol stack over the L interface. 

By way of example, the protocols depicted in FIG. 2, operate as follows: 
the PPP R protocol 208 on the TE2 102 device encodes packets from the upper 
5 layer protocols 204, and the network layer IP protocol 206. The PPP E protocol 
208 then transmits the packets across the R m interface using the TIA/E1A 232- 
F protocol 210 to the TIA/EIA-232-F-compatible port on the MT2 device 104 
running the TIA/E1A 232-F protocol 212. The TIA/EIA-232-F standard is 
defined in "INTERFACE BETWEEN DATA TERMINAL EQUIPMENT AND 

10 DATA CIRCUIT-TERMINATING EQUIPMENT EMPLOYING SERIAL 
BINARY DATA INTERCHANGE", published in October 1997 and herein 
incorporated by reference. It is to be understood that other standards or 
protocols known to artisans of ordinary skill in the art may be used to define 
the transmission across the R m interface. For example, other applicable R m 

15 interface standards include, the "UNIVERSAL SERIAL BUS (USB) 
SPECIFICATION, Revision 1.1", published in September 1998, and the 
"BLUETOOTH SPECIFICATION VERSION 1.0A CORE, published in July 
1999, both incorporated by reference. 

The TIA/EIA 232-F protocol 212 on the MT2 device 104 receives the 

20 packets from the TE2 device 102 and passes them to the PPP R protocol 213. 
As stated above, the PPP R protocol 213 unframes the packets encapsulated in 
the PPP frames and typically, when a data connection is up, the protocol 213 
transfers the packets to PPPy protocol 217. Protocol 217 essentially re-frames 
the packets for transmission to a PFF V peer located in the IWF 108. The 

25 Radio Link Protocol (RLP) 216 and IS-95 protocol 214, both of which are well 
known in the art, are used to transmit the packet-encapsulated PPP frames to 
the BS/MSC 106 over the U m interface. The RLP protocol 216 is defined in 
the IS-707.2 standard, entitled "DATA SERVICE OPTIONS FOR WIDEBAND 
SPREAD SPECTRUM SYSTEMS: RADIO LINK PROTOCOL", published in 

30 February 1998 and herein incorporated by reference, as well as the 1S-707-A.2 
standard, entitled "DATA SERVICE OPTIONS FOR SPREAD SPECTRUM 
SYSTEMS: RADIO LINK PROTOCOL", published in March 1999 and also 
incorporated by reference. 
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A corresponding RLP protocol 220 and IS-95 protocol 222 in the 
BS/MSC 106 transfer the packets to the relay layer protocol 224 for 
transmission across the L interface to the relay layer protocol 224 on the IWF 
108. The PPPu protocol 232 then unframes the received packets and transfers 
5 them to the network layer protocol IP 230, which in turn passes them to the 
upper layer protocols 228 or forwards them to the Internet. 

As stated above, the PPP E protocol 213 transfers the packets to the PPPu 
protocol 217 when a data link connection is established. RFC 1661 provides 
that Link Control Protocol (LCP) packets must be exchanged and negotiated 

10 over each PPP link (i.e., PPP R and PPPu) in order to establish, configure, and 
test the data link connection. As such, these LCP packets comprise 
Configure-Request, Configure-Ack, Configure-Nak, Protocol-Reject, and 
Configure-Reject messages to negotiate various options and operate as 
follows: the Configure-Request packet is used to negotiate configuration 

15 options. The Configuration-Ack packet is only transmitted if every 
configuration option in a received Configuration-Request packet is 
recognizable and all values are acceptable. The Configure-Nak packet is sent 
when the requested configuration options in a Configuration-Request packet 
are recognizable but contain values that are not acceptable and the 

20 Configure-Nak Options field is filled with the unacceptable Configure- 
Request configuration options and suggested values that will work. The 
Configure-Reject packet is sent when the requested configuration options in 
a Configure-Request includes configuration options that are not understood 
by the receiver and the Configure-Reject Options field contains the 

25 unrecognized Configure-Request configuration options. 

Once the LCP packets are exchanged, the link options negotiated, and 
the data link connection established, a network layer connection must be 
established between the TE2 device 102 and the IWF 108. Such a connection 
is achieved through protocols 206, 212, 218, 230, which include, for example, 

30 the IP protocol. The negotiating, configuring, enabling, and disabling of the 
IP protocol on both ends of the PPP links is provided by the Internet Protocol 
Control Protocol (IPCP). IPCP is a part of a family of Network Control 
Protocols (NCPs) included in the PPP protocol and is described in Request for 
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Comment (RFC) 1332, "THE PPP INTERNET PROTOCOL CONTROL 
PROTOCOL (IPCP)", published in May 1992 and herein incorporated by 
reference. 

The IPCP protocol uses the same configuration option negotiation 
5 mechanism as the LCP protocol and, much like the LCP protocol, IPCP 
negotiations occur separately for both the R m interface and the U m interface. 
As described in RFC 1661, the Configuration- Ack packet contains a list of the 
options, which the Sender is acknowledging. The MT2 device 104 monitors 
the received and transmitted Configuration-Ack packets over the R m and U m 

10 interfaces and stores the value of each option in a storage device, such as a 
computer memory. All configuration options have default values, defined 
by RFC 1661, which are used when the corresponding configuration option 
is not negotiated. It is to be noted that the configuration option default 
values may be defined by other RFCs, such as, for example, RFC 1877 entitled 

15 "PPP Internet Protocol Control Protocol Extensions for Name Server 
Addresses" published in December 1995 and incorporated by reference. 

As stated above with respect to the Network Model, the PPPu link can 
be renegotiated without forcing the PPP R link to be renegotiated. To 
maintain such isolation between the R m and U m interfaces, the MT2 device 

20 104 generally unframes and reframes received PPP packets. Unless packets 
received by the MT2 device 104 are to be passed to an executing upper layer 
protocol within the MT2 device 104, the PPP packets are unframed only to be 
reframed for subsequent transmission to a PPP peer protocol. This 
unframing/reframing occurs even when the packets require no further 

25 processing in the MT2 device 104. For example, when a call is initially 
brought up, the LCP and IPCP mechanisms can negotiate to establish 
identical configuration options for both the U m and R m interfaces. As long as 
the configuration options remain identical, all of the PPP data packets (as 
opposed to the configuration packets) could "pass through", from one 

30 interface to the other, without the MT2 device 104 unframing/reframing the 
packets. Clearly, in cases where the configuration options remain identical, 
the MT2 device 104 performs too many unnecessary PPP packet 
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unframing/reframing operations. Such operations adversely affect the 
processing resources and throughput latency of the MT2 device 104. 

However, if the configuration options change, they must be 
renegotiated, which militates in favor of unframing/reframing the PPP 
5 packets. For example, by virtue of the fact that the MT2 device 104 is mobile, 
it is capable of moving to an area that is served by an IWF 108 that is 
different from the original IWF 108. When this happens, the MT2 device 
104 will be "handed off" to the new IWF 108 for service. This handoff 
requires the renegotiation of particular LCP and IPCP configuration options 

10 over the U m interface as well as the intervention of the MT2 device 104. If 
the packets containing the configuration option messages (e.g., Configure- 
Request, Configure-Ack, Configure-Nak, etc.) were simply "passed through", 
without unframing or examining the contents of the packets, the packets 
would force the end-to-end resynchronization of the entire link which 

15 would terminate the independence of the R m and U m links. 

Therefore, what is needed is a novel and efficient method and system 
capable of early protocol and configuration message detection without 
having to unframe a PPP packet. 



20 SUMMARY OF THE INVENTION 

The present invention addresses the need identified above by 
providing a method and system that detects protocol and configuration 
messages in a PPP packet without having to unframe the entire packet. 

Methods and systems consistent with the principles of the present 

25 invention as embodied and broadly described herein include a 
communication device that receives a plurality data frames, wherein the 
communication device is capable of ascertaining the beginning of an 
information portion within the received frames. The communications 
device detects whether the information portion contains configuration 

30 information, such as protocol and configuration messages of a 
predetermined type. In a first embodiment, the detection is achieved by the 
communication device unescaping the contents of a plurality of bytes and 
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determining whether the escaped bytes contains the desired configuration 
information. In a second embodiment, the communication device 
determines whether the contents of a particular byte contain the desired 
configuration information, in escaped or unescaped form, and the 
5 communication device continues to sequentially process the bytes within 
the information portion until the bytes typically containing the desired 
configuration information are processed or it is determined that the 
information does not exist. 

10 BRIEF DESCRIPTION OF THE DRAWINGS 

The accompanying drawings, which are incorporated in and 
constitute a part of this Specification, illustrate an embodiment of the 
invention and, together with the description, explain the objects, 
advantages, and principles of the invention. In the drawings: 
15 FIG. 1 is a high level block diagram depicting various elements of a 

wireless communication system. 

FIG. 2 schematically describes the protocol stacks of a wireless 
communication system. 

FIG. 3 is a flow-chart diagrams describing a first embodiment of the 
20 invention. 

FIGS. 4A, 4B are flow-chart diagrams describing a second embodiment 
of the invention. 

FIG. 5 describes the general format of a packet encapsulated in a PPP 

frame. 

25 

DETAILED DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

The following detailed description of the embodiments of the present 
30 invention refers to the accompanying drawings that illustrate these. Other 
embodiments are possible and modifications may be made to the 
embodiments without departing from the spirit and scope of the invention. 
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Therefore, the following detailed description is not meant to limit the 
invention. Rather the scope of the invention is defined by the appended 
claims. 

It will be apparent to one of ordinary skill in the art that an 
5 embodiment of the present invention, as described below, may be realized in 
a variety of implementations, including the software, firmware, and 
hardware of the entities illustrated in the figures (i.e., TE2 device 102, MT2 
device 104, BS/MSC 106 and IWF 108). The actual software code or control 
hardware used to implement the present invention is not limiting of the 

10 present invention. Thus, the operation and behavior of the present 
invention will be described without specific reference to the actual software 
code or hardware components. Such non-specific references are acceptable 
because it is clearly understood that a person of ordinary skill in the art 
would be able to design software and control hardware to implement the 

15 embodiment of the present invention based on the description herein. 

Because the embodiments described herein operate on PPP packets 
encapsulated in HDLC frames, FIG. 5 illustrates the various attributes of 
such packets. The beginning (and end) of the frame is demarcated by a 1-byte 
framing flag represented by the hexadecimal character "7E". The following 

20 two bytes indicate the protocol address and control field which, for standard 
PPP packets, are typically designated as the hexadecimal characters "FF" and 
"03", respectively. The next two bytes indicate the protocol type, such as, for 
example, the TCP protocol, denoted by the hexadecimal characters "CO" and 
"21"; the IPCP protocol, indicated by the hexadecimal characters "80" and 

25 "21"; or the Van Jacobson protocol compressed state, indicated by the 
hexadecimal characters "00" (which may be compressed out) and "2D". The 
subsequent byte indicates the code or the configuration message, such as 
Configure-Request, denoted by the hexadecimal character "01"; Configure- 
Ack, indicated by the hexadecimal character "02"; or Configure-Nak, 

30 indicated by the hexadecimal character "03". 
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1. First Embodiment 

FIG. 3 is a flow-chart diagram depicting a first embodiment of the 
present invention. As such, FIG. 3 details the operation of the MT2 device 
104 for performing early protocol and configuration message detection in 
5 PPP packets. 

In step S305, the MT2 device 104, first scans an incoming data stream 
to detect the framing flag, indicated by the hexadecimal character "7E". This 
flag demarcates a frame and can, therefore, be used to indicate the beginning 
and/or end of packets encapsulated in PPP frames. If the MT2 device 104 has 

10 not detected a "7E" framing flag, it keeps scanning the incoming data, as 
indicated by step S306, until it detects the flag. Once the MT2 device 104 
detects the "7E" framing flag, it progresses to step S310. 

After detecting a "7E" flag, the MT2 device 104, in step S310, 
determines whether the next byte is also a "7E" flag. If so, the MT2 device 

15 104 skips that particular byte, as indicated in step S320, and returns back to 
step S310 to apply the "7E" flag test to the next byte. If the next byte is not a 
"7E" flag, the MT2 device 104 progresses to step S315. It is important to note 
that the incoming data stream may contain consecutive "7E" flags, as in the 
case of back-to-back packets where a "7E" flag, indicating the end of a frame, 

20 is juxtaposed to a subsequent "7E" flag, indicating the beginning of a new 
frame. Steps S310 and S320 operate to filter out the framing flags, enabling 
the MT2 device 104 to discern where the information portion of the framed 
packet begins. 

Aware that the next byte is not a "7E" flag, but an information byte, 
25 the MT2 device 104 in step S315, "unescapes" the next X number of bytes, 
where X corresponds to the relative position of the information sought 
within the framed-packet. This unescaping is performed because, as is well 
known in the art, when the PPP protocol is transmitted with asynchronous, 
HDLC-like framing (i.e., as per RFC 1662), the protocol employs an "escaping 
30 technique" to mask certain characters within the information portion of a 
packet that also function as special control characters. Such characters 
include the aforementioned "7E" flag as well as the escape flag "7D". When 
these characters are encountered in the information portion of a framed- 
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packet, the escaping technique stuffs the escape flag "7D" in front of the 
character and modifies the character in order to neutralize its control 
function. Therefore, in seeking to detect certain protocol or configuration 
information from an incoming data stream, the MT2 device 104, in step 
5 S315, unescapes the number of bytes necessary to access the information 
sought in order to uncover its true identity. After unescaping X bytes, the 
MT2 device 104 proceeds to step S325. 

In step S325, the MT2 device 104 determines whether the unescaped X 
bytes include the standard PPP address and control field characters "FF" and 

10 "03", respectively. Although these characters typically comprise the first and 
second bytes of the information portion of a PPP packet (see, e.g., FIG. 5), 
these characters may be compressed out of the packet, thereby affecting the 
location of the ensuing information bytes. Therefore, the MT2 device 104 
must check whether these characters are included within the unescaped 

15 bytes of the packet in order to make the necessary adjustments later. If the 
characters "FF" and "03" are not included in the unescaped bytes (i.e., 
characters "FF" and "03" are compressed out), the MT2 device 104, in step 
S330, checks to see whether these bytes contain the protocol or configuration 
message information being sought. If they do, then the MT2 device 104, in 

20 step S340, forwards the entire packet to the MT2 device 104 unframer, in 
order to unframe the packet and engage in the processing indicated by the 
detected information. If the bytes do not contain the information being 
sought, the MT2 device 104 sends the entire packet to the MT2 device 104 
transmit portion to be forwarded across the pertinent interface, as indicated 

25 by step S345. 

Returning to step S325, if the unescaped X bytes include "FF" and 
"03", the MT2 device 104, in step S335, compensates by unescaping another 2 
bytes, in addition to the specified X bytes. This adjusts for the inclusion of 
the "FF" and "03" characters within the X bytes. The MT2 device 104 then 
30 submits the X + 2 unescaped bytes to step S330, where, as stated above, it 
checks to see whether the unescaped bytes contain the desired information. 
If they do, then the MT2 device 104, in step S340, forwards the entire packet 
to the MT2 device 104 unframer. If the bytes do not contain the protocol or 
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configuration message information being sought, the MT2 device 104, in 
step S345, sends the entire packet to the MT2 device 104 transmit portion to 
forward the packet across the pertinent interface. 

To illustrate the operation of this embodiment, suppose the early 
5 detection of an LCF protocol packet is desired. The LCP protocol 
specification is provided within the protocol information portion of a PPP- 
framed packet. As indicated in FIG. 5, the protocol information is 2 bytes 
long, typically occupying byte positions 3 and 4 of the information portion of 
a standard PPP-framcd packet. After scanning the incoming data stream and 

10 discerning where the information bytes begin (i.e., steps S305, S310, and 
S320), the MT2 device 104 unescapes the next two bytes (i.e., X equal to 2), as 
indicated by step S315. If, in step S325, the first 2 bytes do not include the 
"FF" and "03" characters, then the MT2 device 104 checks to see whether 
these bytes contain the LCP information being sought. If it does, then the 

15 MT2 device 104, in step S340, forwards the entire packet to the MT2 device 
104 unframer, in order to unframe the packet and engage in the processing 
required by the LCP protocol information. If the bytes do not contain the 
LCP information, the MT2 device 104 sends the entire packet to the MT2 
device 104 transmit portion to be forwarded across the pertinent interface, as 

20 indicated by step S345. 

If, on the other hand, the first two bytes of the unescaped X bytes are 
"FF" and "03", the MT2 device 104, in step S335, compensates by unescaping 
the next 2 bytes, in addition to the first two bytes. The MT2 device 104 then 
submits all four unescaped bytes to step S330, where, as stated above, it 

25 checks to see whether these bytes contain the LCP information being sought. 
If they do, then the MT2 device 104, in step S340, forwards the entire packet 
to the MT2 device 104 unframer. If the bytes do not contain the LCP 
information, the MT2 device 104, in step S345, sends the entire packet to the 
MT2 device 104 transmit portion. 

30 It is important to note that, by virtue of the embodiment described 

above, all of the header information contained within the PPP-framed 
packet can be detected without unframing the entire packet. For example, by 
simply adjusting the X value in step S315, this embodiment can detect such 
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PPP information as protocol information, configuration messages, packet ID, 
etc. 

Thus, this embodiment detects protocol and configuration messages 
within a PPP packet stream without having to unframe the entire packets. 
5 Rather, by unescaping certain bytes within the information portion of the 
packets, this embodiment provides a system and method that efficiently 
detects protocol and configuration messages without performing 
unnecessary PPP packet unframing/ refraining operations. 

10 

2. Second Embodiment 

FIGS. 4A, 4B are flow-chart diagrams depicting a second embodiment 
of the present invention. This embodiment detects protocol and 
configuration messages contained within the information portion of a PPP- 

15 framed packet by scanning the incoming data stream and mechanically 
checking the information bytes in stages, without unframing the packets. 
Given the format of the PPP-framed packets, as illustrated by FIG. 5, the first 
stage specifically detects the content of the 1-byte address field, contained 
within the information portion of the packet. The second stage is directed to 

20 detecting the contents of the 1-byte control field, which follows the address 
field. Accordingly, this embodiment is capable of advancing the stages, and 
detecting the contents of all information fields, until the end of the 
information portion. For example, a third stage could be directed to 
detecting the contents of the 2-byte protocol field, which follow the control 

25 field. However, because of the PPP-framed packet structure and the 
sequential nature of this embodiment, information contained in the later 
fields of the frame, is generally detected after processing and detecting 
information contained in the preceding fields. 

As a representative example of this embodiment, suppose the 

30 information sought is contained within the control field. To access this field 
and detect the pertinent information from an incoming data stream, the 
MT2 device 104 must first identify the beginning of the information portion 
of the PPP packet and then access and detect the information in the address 
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field. Only after processing the address field information, is the MT2 device 
104 ready to access and detect the control field information. 

As such, FIG. 4A illustrates the first stage of this embodiment. In step 
S405, the MT2 device 104 first scans the incoming data stream to detect the 
5 framing flag "7E". After detecting the "7E" flag, the MT2 device 104, in step 
S410, determines whether the next byte is also a "7E" flag. If it is, the MT2 
device 104 moves to the next byte, as indicated in step S415, and returns back 
to step S410 to apply the "7E" flag test to the next byte. If the next byte is not a 
"7E" flag, the MT2 device 104 progresses to step S420. As stated above with 

10 respect to the first embodiment, steps S410 and S415 operate to filter out the 
framing flags, allowing the MT2 device 104 to identify the beginning of the 
information portion of the PPP-framed packet. 

Once the MT2 device 104 is able to identify the beginning information 
portion, it exploits the format of PPP packets to detect the information in 

15 stages. As stated above, the first stage of this embodiment is to detect the 
character "FF". 

In step S420, the MT2 device 104 checks to see whether the first 
information byte is the escape character "7D". As indicated above, the 
escaping technique stuffs the escape flag "7D" in front of certain characters 

20 and masks them. If the first information byte is not "7D" (i.e., the first 
information byte is not escaped), the MT2 device 104, in step S425, checks to 
see if the first information byte is the "FF" character (i.e., in unescaped 
form). If it is, the MT2 device 104 proceeds to step S435. If first information 
byte is not the "FF" character, the MT2 device 104 determines, in step S426, 

25 whether there is more information within the framed-packet to be sought, 
and if there is, the MT2 device 104 moves onto the next stage in step S427. If 
there is no additional desired information, the MT2 device 104, in step S428, 
sends the entire packet to the MT2 device 104 transmit portion to forward 
the packet across the pertinent interface. 

30 Returning to step S420, if the first information byte is "7D" (i.e., the 

first information byte is escaped), the MT2 device 104, in step S430, checks to 
see whether the next byte is the "FF" character in the escaped format (i.e., 
hexadecimal character "DF"). If it is, the MT2 device 104 proceeds to step 
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S435. If the next byte is not the "DF" character, the MT2 device 104 proceeds 
to step S426 where, as stated above, the MT2 device 104 checks to see 
whether there is more desired information. If there is, the MT2 device 104 
moves onto the next stage in step S427. If there is no additional desired 
5 information, the MT2 device 104, in step S428, sends the entire packet to the 
MT2 device 104 transmit portion to forward the packet across the pertinent 
interface. 

If, in step S430, the next byte is the "FF" character in the escaped 
format (i.e., hexadecimal character "DF"), the MT2 device 104 proceeds to 

10 step S435, where it checks to see whether there is more information to be 
sought. If there is, the MT2 device 104 moves onto the next stage in step 
S427. If there is no additional desired information, the MT2 device 104, in 
step S437, forwards the entire packet to the MT2 device 104 unframer, in 
order to unframe the packet and engage in the processing indicated by the 

15 detected information. 

After completing the first stage of the embodiment (i.e., the detection 
of the "FF" character in the protocol address field), the MT2 device 104 must, 
consistent with the object of the representative example, endeavor to detect 
the "03" character in the control field. As noted above, this detection is 

20 referred to as the second stage detection for this embodiment and is depicted 
in FIG. 4B. 

Upon completing the first stage, as indicated by step S427, the MT2 
device 104, in step S440, determines, once again, whether the next byte is the 
"7D" character. As stated above, this determination is used in case the 

25 characters within the relevant information field were escaped. If the next 
byte is not the "7D" character, the MT2 device 104, in step S445, determines 
whether the byte is the "03" character (i.e., in unescaped format). If it is, the 
MT2 device 104 progresses to step S435 where, as previously noted, the MT2 
device 104 determines whether there is additional information being 

30 sought, and if there is the MT2 device 104 moves onto the next stage, as per 
step S427. Otherwise, the MT2 device 104, in step S428, forwards the entire 
packet to the MT2 device 104 transmit portion to forward the packet across 
the relevant interface. 



WO 01/19027 



17 



PCT/US00/24623 



Returning to step S440, if the MT2 device 104 determines that the 
following byte is the "7D" character, it checks to see, in step S450, whether 
the subsequent byte is the "03" character in the escaped format (i.e., 
hexadecimal character "23"). If the subsequent byte is not the "23" character, 
5 the MT2 device 104 proceeds to step S426, to determine whether to move 
onto the next stage, as in step S427, or send the entire packet to the MT2 
device 104 transmit portion to forward the packet across the pertinent 
interface, as in step S428. If the subsequent byte is the "23" character, the 
MT2 device 104 proceeds to step S435 where it determines whether to move 

10 onto the next stage, as in step S427, or forward the entire packet to the MT2 
device 104 unframer, as in step S437. 

Thus, this embodiment detects protocol and configuration messages 
within a PPP packet stream without having to unframe the packets. Rather, 
this embodiment scans the incoming data stream and mechanically checks 

15 the information bytes in stages. These stages correspond to the information 
fields of the PPP-framed packets and, therefore, this embodiment detects the 
desired information sequentially without performing unnecessary PPP 
packet unframing/reframing operations and without ignoring messages 
affecting link configurations. 

20 The foregoing description of preferred embodiments of the present 

invention provides illustration and description, but is not intended to be 
exhaustive or to limit the invention to the precise form disclosed. 
Modifications and variations are possible consistent with the above teachings 
or maybe acquired from practice of the invention. Accordingly, the scope of 

25 the invention is defined by the claims and their equivalents. 

What is claimed is: 
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CLAIMS 



1. A method for early detection of configuration information of a 
2 predetermined type, said method comprising: 

receiving, on a communication device, a plurality of framed data 
4 packets, each of said framed data packets containing an information portion; 

detecting, on said communication device, a beginning of said 
6 information portion within one of said framed data packets; and 

determining, on said communication device, whether said 
8 information portion contains said configuration information of a 
predetermined type, 

10 wherein said communication device unframes said one of said 

framed data packets when said information portion contains said 
12 configuration information of a predetermined type. 

2. The method of Claim 1, wherein said detecting includes 
2 scanning said plurality of said framed data packets and establishing said 

beginning of said information portion for one of said framed data packets by 
4 identifying a frame-demarcating character. 

3. The method of Claim 2, wherein said detecting includes, 

2 unescaping, on said communication device, contents of a 

predetermined number of bytes within said information portion, and 

4 determining, on said communication device, whether said contents 

of said unescaped predetermined number of bytes includes predetermined 

6 characters, 

wTierein said communication device unescapes contents of additional 
8 consecutive bytes, succeeding said predetermined number of bytes, when 
said contents of said unescaped predetermined number of bytes includes said 
10 predetermined characters, and 

wherein said communication device determines whether contents of 
12 said unescaped predetermined number of bytes and contents of additional 
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consecutive bytes contain said configuration information of a 
14 predetermined type. 



4. The method of Claim 2, wherein said detecting includes, 

2 determining, on said communication device, whether contents of a 

particular byte or bytes of said information portion contains information of a 

4 type associated with said particular byte, and 

determining, on said communication device, whether said contents 

6 of said particular byte contains said configuration information of a 
predetermined type, 

8 wherein said communication device progresses to a subsequent stage 

when said contents of said particular byte lacks said configuration 
10 information of a predetermined type and said configuration information of 
a predetermined type is disposed in a byte position subsequent to said 
12 particular byte. 

5. The method of Claim 4, wherein said progresses to a 
2 subsequent stage further includes, 

examining, on said communications device, contents of at least one 
4 succeeding byte of said information portion, said succeeding byte being 

subsequent to said particular byte, and 
6 determining, on said communication device, whether contents of 

said succeeding byte contains information of a type associated with said 
8 succeeding byte, and 

determining, on said communication device, whether said contents 
10 of said succeeding byte contains said configuration information of a 
predetermined type, 

12 wherein said communication device sequentially examines 

successive bytes of said information portion until contents of said 

14 succeeding byte contains said configuration information of a predetermined 
type. 
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6. The method of Claim 5, wherein said contents of said particular 
2 byte and said contents of said succeeding byte includes escaped information. 

7. The method of Claim 5, wherein said contents of said particular 
2 byte and said contents of said succeeding byte includes unescaped 

information. 

8. A system for early detection of configuration information of a 
2 predetermined type, said system comprising: 

a terminal device for transmitting and receiving a plurality of framed 
4 data packets, each of said framed data packets containing an information 
portion; and 

6 a communication device coupled to said terminal device, 

wherein said communication device detects a beginning of said 
8 information portion within one of said framed data packets and determines 
whether said information portion contains said configuration information 
10 of a predetermined type, and 

wherein said communication device unframes said one of said 
12 framed data packets when said information portion contains said 
configuration information of a predetermined type. 

9. The system of Claim 8, wherein said detecting by said 
2 communication device includes scanning said plurality of said framed data 

packets and establishing said beginning of said information portion for one 
4 of said framed data packets by identifying a frame-demarcating character. 

10. The system of Claim 9, wherein said detecting by said 
2 communication device includes, 

unescaping contents of a predetermined number of bytes within said 
4 information portion, and 

determining whether said contents of said unescaped predetermined 
6 number of bytes includes predetermined characters, 
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wherein said communication device unescapes contents of additional 
8 consecutive bytes, succeeding said predetermined number of bytes, when 
said contents of said unescaped predetermined number of bytes includes said 
10 predetermined characters, and 

wherein said communication device determines whether contents of 
12 said unescaped predetermined number of bytes and contents of additional 
consecutive bytes contain said configuration information of a 
14 predetermined type. 

11. The system of Claim 9, wherein said detecting by said 
2 communication device includes, 

determining whether contents of a particular byte or bytes of said 
4 information portion contains information of a type associated with said 

particular byte or bytes, and 
6 determining whether said contents of said particular byte or bytes 

contains said configuration information of a predetermined type, 
8 wherein said communication device progresses to a subsequent stage 

when said contents of said particular byte or bytes lacks said configuration 
10 information of a predetermined type and said configuration information of 
a predetermined type is disposed in a byte position subsequent to said 
12 particular byte or bytes. 

12. The system of Claim 11, wherein said communication device 
2 progressing to a subsequent stage further includes, 

examining contents of at least one succeeding byte of said information 
4 portion, said succeeding byte being subsequent to said particular byte, and 

determining whether contents of said succeeding byte contains 
6 information of a type associated with said succeeding byte and whether said 
contents of said succeeding byte contains said configuration information of a 
8 predetermined type, 

wherein said communication device sequentially examines 
10 successive bytes of said information portion until contents of said 



WO 01/19027 PCT/US00/24623 

22 

succeeding byte contains said configuration information of a predetermined 
12 type. 

13. The method of Claim 12, wherein said contents of said 
2 particular byte and said contents of said succeeding byte includes escaped 
information. 
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METHODS FOR EFFICIENT EARLY PROTOCOL DETECTION 
BACKGROUND OF THE INVENTION 

5 

I. Field of the Invention 

This invention generally relates to the field of wireless 
communications. More particularly, the present invention relates to a 
novel method and system for performing early protocol and configuration 
10 message detection without having to unframe entire PPP packets. 

II. Description of Related Art 

Recent innovations in wireless communication and computer-related 
technologies, as well as the unprecedented growth of Internet subscribers, 

15 have paved the way for mobile computing. In fact, the popularity of mobile 
computing has placed greater demands on the current Internet 
infrastructure to provide mobile users with more support. A crucial part of 
meeting these demaids andproviding users with the necessary support is the 
use of Code Division Multiple Access (CDMA) technology in wireless 

20 com mu n icatio n system s. 

CDMA is a digital radio-frequency (RF) channelization technique 
defined in the Telecommunications Industry Association/Electronics 
Industries Association Interim Standard-95 (TIA/EIA IS-95), entitled "MOBILE 
STATION -BASE STATION COMPATIBILTTY STANDARD FOR DUAL- 

25 MODE WIDEBAND SPREAD SPECTRUM CELLULAR SYSTEM", published 
in July 1993 and herein incorporated by reference. Wireless communication 
systems employing this technology assign a unique code to communication 
signals and spread these communication signals across a common (wideband) 
spread spectrum bandwidth. As long as the receiving apparatus in a CDMA 

30 system has the correct code, it can successfully detect and select its 
communication signal from the other signals concurrently transmitted over 
the same frequency band The use of CDMA produces an increase in system 
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traffic capacity, improves overall call quality and noise reduction, and provides 
a reliable transport mechanism for data service traffic, 

FIG. 1 illustrates the basic elements of such a wireless data 
communication system 100. Artisans of ordinary skill will readily appreciate 
5 that these elements, or their interfaces, may be modified, augmented, or 
subjected to various standards known in the art, without limiting their 
scope or function. System 100 allows a mobile terminal equipment, TE2 
device 102 (e.g., the terminal equipment such as laptop or palmtop 
computer) to communicate with an Interworking Function (IWF) 108. 

10 System 100 includes a wireless communication device, MT2 device 104 (e.g., 
wireless telephone), and a Base Station/Mobile Switching Center (BS/MSC) 
106. The IWF 108 serves as a gateway between the wireless network and 
other networks, such as the Public Switched Telephone Network or wireline 
packet data networks providing Internet- or Intranet-based access. 

15 As shown in FIG. 1, the IWF 108 is coupled to the BS/MSC 106, via 

the L interface. Often the IWF 108 will be co-located with the BS/MSC 106. 
The TE2 device 102 is electronically coupled to the MT2 device 104 via the 
R m interface. The MT2 device 104 communicates with the BS/MSC 106 via 
the wireless interface U m . The TE2 device 102 and the MT2 device 104 may 

20 be integrated into a single unit or may be separated out, as in the case of an 
Installed mobile phone unit in which a laptop is the TE2 device 102 and the 
transceiver is the MT2 device 104. It is important to note that, as indicated 
by FIG. 2, the combination of the TE2 device 102 and the MT2 device 104, 
whether integrated or separate, is generally referred to as a mobile station 

25 (MS) 103. 

Other support is made possible by applying various well-known 
protocols to control, manage, or otherwise facilitate different aspects of 
wireless communications. For example, the life-blood of the Internet 
infrastructure, the Internet Protocol (IP), has been incorporated in wireless 
30 communications to accommodate packet-oriented services. The IP protocol 
specifies the addressing and routing of packets (datagrams) between host 
computers and is defined in Request For Comment 791 (RFC 791) entitled, 
"INTERNET PROTOCOL DARPA INTERNET PROGRAM PROTOCOL 
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SPECIFICATION/' published September 1981, and herein incorporated by 
reference. 

The IP protocol is a network layer protocol that encapsulates data into 
IP packets for transmission. Addressing information is affixed to the header 
5 of the packet, IP headers (e.g., IP version 4) contain 32-bit addresses that 
identify the sending and receiving hosts. These addresses are used by 
intermediate routers to select a path through the network for the packet 
towards its ultimate destination at the intended address. Thus, the TP 
protocol allows packets originating at any Internet node in the world to be 

10 routed to any other Internet node in the world, given that the originating 
party knows the IP address of the destination party. 

Another well-known protocol which has been incorporated in 
wireless communications systems is the Point-to -Point Protocol (PPP) 
protocol, which provides, inter alia, Internet access. The PPP protocol is 

15 described in detail in Request for Comments 1661 (RFC 1661), entitled "THE 
POINT-TO-POINT PROTOCOL (PPP)", published July 1994 and herein 
incorporated by reference. 

Essentially, the PPP protocol spedfies a method for transporting multi- 
protocol datagrams over point-to-point links and contains three main 

20 components: a method of encapsulating multi-protocol datagrams over 
serial links; a Link Control Protocol (LCP) for establishing, testing, 
configuring, and maintaining a data link connection; and a family of 
Network Control Protocols (NCPs) for establishing and configuring different 
network-layer protocols. 

25 In an effort to provide a host of services on wireless communication 

systems, various standards have been developed to accommodate the 
wireless data transmission between the TE2 device 102 and the IWF 108. For 
example, the TIA/EIA IS-707.5 standard, entitled "DATA SERVICE 
OPTIONS FOR WIDEBAND SPREAD SPECTRUM SYSTEMS: PACKET 

30 DATA SERVICES/' published February 1998, and herein incorporated by 
reference, defines requirements for support of packet data transmission 
capability on TIA/EIA IS-95 systems and spedfies a suite of packet data bearer 
services. Similarly, the TIA/EIA IS-707-A.5 standard, entitled "DATA 
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SERVICE OPTIONS FOR SPREAD SPECTRUM SYSTEMS: PACKET DATA 
SERVICES/' and the TIA/EIA IS-707-A.9 standard, entitled "DATA SERVICE 
OPTIONS FOR SPREAD SPECTRUM SYSTEMS: HIGH-SPEED PACKET 
DATA SERVICES/' both published in March 1999 and incorporated by 
5 reference, also define requirements for packet data transmission support on 
TIA/EIA IS-95 systems. 

These standards provide that certain packet data service options that 
may be used to communicate between the TE2 device 102 and IWF 108 via 
BS/MSC 106. In doing so, IS-707.5 introduces the Network Model, which 

10 details the packet data protocol requirements for the R m interface, U ffi 
interface, and the L interface. Under this model, two separate PPP links are 
provided at the data link layer: a first PPP link (PPP R ) provides the data link 
layer between the TE2 device 102 and the MT2 device 104 (i.e., across the R m 
interface), and a second PPP link (PPPy), independent of the first, provides 

15 the data link layer between the MT2 device 104 and the IWF 108 (i.e., across 
the U m and L interfaces). 

The separate and independent PPP links help support "transparent 
mobility"; that is, the TE2 device 102 should experience seamless and 
transparent service, regardless of time and its current IWF 108 point-of- 

20 attachment. As such, the TE2 device 102 should not be affected by location 
changes. For example, the TE2 device 102 should not be affected from PPP 
renegotiations occurring on the U m link, such as when MT2 device 104 
attempts to attach to a different IWF 108. Thus, the Network Model operates 
to isolate the PPP R link from the PPPy link in order to prevent changes on 

25 the U m link from affecting the R m link. In other words, the PPPu link can be 
renegotiated without forcing the PPP E link to be renegotiated. 

FIG. 2 illustrates the protocol stacks in each entity of the IS-707.5 
Network Model. At the far left of FIG. 2 is a protocol stack, shown in 
conventional vertical format, depicting the protocol layers running on the 

30 TE2 device 102 (e.g., the mobile terminal, laptop or palmtop computer). The 
TE2 device 104 protocol stack is illustrated as being logically connected to the 
MT2 device 104 protocol stack over the interface. The MT2 device 104, is 
illustrated as being logically connected to the BS/MSC 106 protocol stack 



WO 01/019027 



PCT/USOO/24623 



over the U m interface. The BS/MSC 106 protocol stack is, in turn, shown as 
being logically connected to the IWF 108 protocol stack over the L interface. 

By way of example, the protocols depicted in PIG. 2, operate as follows: 
the PPP E protocol 208 on the TE2 102 device encodes packets from the upper 
5 layer protocols 204/ and the network layer IP protocol 206. The PPP R protocol 
208 then transmits the packets across the R m interface using the TIA/EIA 232- 
F protocol 210 to the TIA/EIA-232-F-compatible port on the MT2 device 104 
running the TIA/EIA 232-F protocol 212. The TIA/EIA-232-F standard is 
defined in "INTERFACE BETWEEN DATA TERMINAL EQUIPMENT AND 

10 DATA CIRCUIT-TERMINATING EQUIPMENT EMPLOYING SERIAL 
BINARY DATA INTERCHANGE", published in October 1997 and herein 
incorporated by reference. It is to be understood that other standards or 
protocols known to artisans of ordinary skill in the art may be used to define 
the transmission across the R m interface. For example, other applicable R m 

15 interface standards include, the "UNIVERSAL SERIAL BUS (USB) 
SPECIFICATION, Revision 1.1", published in September 1998, and the 
"BLUETOOTH SPECIFICATION VERSION 1.0A CORE, published in July 
1999, both incorporated by reference. 

The TIA/EIA 232-F protocol 212 on the MT2 device 104 receives the 

20 packets from the TE2 device 102 and passes them to the PPP E protocol 213. 
As stated above, the PPP R protocol 213 unframes the packets encapsulated in 
the PPP frames and typically, when a data connection is up, the protocol 213 
transfers the packets to PPPu protocol 217. Protocol 217 essentially re-frames 
the packets for transmission to a VFV V peer located in the IWF 108. The 

25 Radio Link Protocol (RLP) 216 and IS-95 protocol 214, both of which are well 
known in the art, are used to transmit the packet-encapsulated PPP frames to 
the BS/MSC 106 over the U m interface. The RLP protocol 216 is defined in 
the IS-707.2 standard, entitled "DATA SERVICE OPTIONS FOR WIDEBAND 
SPREAD SPECTRUM SYSTEMS: RADIO LINK PROTOCOL", published in 

30 February 1998 and herein incorporated by reference, as well as the IS-707-A.2 
standard, entitled "DATA SERVICE OPTIONS FOR SPREAD SPECTRUM 
SYSTEMS: RADIO LINK PROTOCOL", published in March 1999 and also 
incorporated by reference. 
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A corresponding RLP protocol 220 and IS-95 protocol 222 in the 
BS/MSC 106 transfer the packets to the relay layer protocol 224 for 
transmission across the L interface to the relay layer protocol 224 on the IWF 
108. The PPPy protocol 232 then unframes the received packets and transfers 
5 them to the network layer protocol IP 230, which in turn passes them to the 
upper layer protocols 228 or forwards them to the Internet. 

As stated above, the PPP E protocol 213 transfers the packets to the PPPu 
protocol 217 when a data link connection is established. RFC 1661 provides 
that Link Control Protocol (LCP) packets must be exchanged and negotiated 
10 over each PPP link (i.e., PPP R and PPPu) in order to establish,, configure, and 
test the data link connection. As such, these LCP packets comprise 
Configure-Request, Configure-Ack, Configure-Nak, Protocol-Reject, and 
Configure-Reject messages to negotiate various options and operate as 
follows: the Configure-Request packet is used to negotiate configuration 

15 options. The Configuration-Ack packet is only transmitted if every 
configuration option in a received Configuration-Request packet is 
recognizable and all values are acceptable. The Configure-Nak packet is sent 
when the requested configuration options in a Configuration-Request packet 
are recognizable but contain values that are not acceptable and the 

20 Configure-Nak Options field is filled with the unacceptable Configure- 
Request configuration options and suggested values that will work. The 
Configure-Reject packet is sent when the requested configuration options in 
a Configure-Request includes configuration options that are not understood 
by the receiver and the Configure-Reject Options field contains the 

25 unrecognized Configure-Request configuration options. 

Once the LCP packets are exchanged, the link options negotiated, and 
the data link connection established, a network layer connection must be 
established between the TE2 device 102 and the IWF 108. Such a connection 
is achieved through protocols 206, 212, 218, 230, which include, for example, 

30 the IP protocol. The negotiating, configuring, enabling, and disabling of the 
IP protocol on both ends of the PPP links is provided by the Internet Protocol 
Control Protocol (IPCP). IPCP is a part of a family of Network Control 
Protocols (NCPs) included in the PPP protocol and is described in Request for 
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Comment (RFC) 1332, "THE PPP INTERNET PROTOCOL CONTROL 
PROTOCOL (LPCP)", published in May 1992 and herein incorporated by 
reference. 

The IPCP protocol uses the same configuration option negotiation 
5 mechanism as the LCP protocol and, much like the LCP protocol, IPCP 
negotiations occur separately for both the R m interface and the U m interface. 
As described in RFC 1661, the Configuration- Ack packet contains a list of the 
options, which the Sender is acknowledging. The MT2 device 104 monitors 
the received and transmitted Configuration-Ack packets over the R m and U m 

10 interfaces and stores the value of each option in a storage device, such as a 
computer memory. All configuration options have default values, defined 
by RFC 1661, which are used when the corresponding configuration option 
is not negotiated. It is to be noted that the configuration option default 
values may be defined by other RFCs, such as, for example, RFC 1877 entitled 

15 "PPP Internet Protocol Control Protocol Extensions for Name Server 
Addresses" published in December 1995 and incorporated by reference. 

As stated above with respect to the Network Model, the PPPu link can 
be renegotiated without forcing the PPP R link to be renegotiated. To 
maintain such isolation between the R^ and U m interfaces, the MT2 device 

20 104 generally unframes and reframes received PPP packets. Unless packets 
received by the MT2 device 104 are to be passed to an executing upper layer 
protocol within the MT2 device 104, the PPP packets are unframed only to be 
reframed for subsequent transmission to a PPP peer protocol. This 
unframing/ retraining occurs even when the packets require no further 

25 processing in the MT2 device 104. For example, when a call is initially 
brought up, the LCP and IPCP mechanisms can negotiate to establish 
identical configuration options for both the U m and R^ interfaces. As long as 
the configuration options remain identical, all of the PPP data packets (as 
opposed to the configuration packets) could "pass through", from one 

30 interface to the other, without the MT2 device 104 unframing/reframing the 
packets. Clearly, in cases where the configuration options remain identical, 
the MT2 device 104 performs too many unnecessary PPP packet 
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unframing/reframing operations. Such operations adversely affect the 
processing resources and throughput latency of the MT2 device 104. 

However, if the configuration options change, they must be 
renegotiated, which militates in favor of unframing/reframing the PPP 
5 packets. For example, by virtue of the fact that the MT2 device 104 is mobile, 
it is capable of moving to an area that is served by an IWF 108 that is 
different from the original IWF 108. When this happens, the MT2 device 
104 will be "handed off" to the new IWF 108 for service. This handoff 
requires the renegotiation of particular LCP and IPCP configuration options 

10 over the U m interface as well as the intervention of the MT2 device 104, If 
the packets containing the configuration option messages (e.g., Configure- 
Request, Configure-Ack, Configure-Nak, etc.) were simply "passed through", 
without unframing or examining the contents of the packets, the packets 
would force the end-to-end resynchronization of the entire link which 

15 would terminate the independence of the R m and U m links. 

Therefore, what is needed is a novel and efficient method and system 
capable of early protocol and configuration message detection without 
having to unframe a PPP packet. 



20 SUMMARY OF THE INVENTION 

The present invention addresses the need identified above by 
providing a method and system that detects protocol and configuration 
messages in a PPP packet without having to unframe the entire packet. 

Methods and systems consistent with the principles of the present 

25 invention as embodied and broadly described herein include a 
communication device that receives a plurality data frames, wherein the 
communication device is capable of ascertaining the beginning of an 
information portion within the received frames. The communications 
device detects whether the information portion contains configuration 

30 information, such as protocol and configuration messages of a 
predetermined type. In a first embodiment, the detection is achieved by the 
communication device unescaping the contents of a plurality of bytes and 
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determining whether the escaped bytes contains the desired configuration 
information. In a second embodiment, the communication device 
determines whether the contents of a particular byte contain the desired 
configuration information, in escaped or unescaped form, and the 
5 communication device continues to sequentially process the bytes within 
the information portion until the bytes typically containing the desired 
configuration information are processed or it is determined that the 
information does not exist, 

10 BRIEF DESCRIPTION OF THE DRAWINGS 

The accompanying drawings, which are incorporated in and 
constitute a part of this Specification, illustrate an embodiment of the 
invention and, together with the description, explain the objects, 
advantages, and principles of the invention. In the drawings: 
15 FIG. 1 is a high level block diagram depicting various elements of a 

wireless communication system. 

FIG. 2 schematically describes the protocol stacks of a wireless 
communication system. 

FIG. 3 is a flow-chart diagrams describing a first embodiment of the 
20 invention. 

FIGS. 4A, 4B are flow-chart diagrams describing a second embodiment 
of the invention. 

FIG. 5 describes the general format of a packet encapsulated in a PPP 

frame. 

25 

DETAILED DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

The following detailed description of the embodiments of the present 
30 invention refers to the accompanying drawings that illustrate these. Other 
embodiments are possible and modifications may be made to the 
embodiments without departing from the spirit and scope of the invention. 
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Therefore, the following detailed description is not meant to limit the 
invention. Rather the scope of the invention is defined by the appended 
claims. 

It will be apparent to one of ordinary skill in the art that an 
5 embodiment of the present invention, as described below, may be realized in 
a variety of implementations, including the software, firmware, and 
hardware of the entities illustrated in the figures (i.e., TE2 device 102, MT2 
device 104, BS/MSC 106 and IWP 108). The actual software code or control 
hardware used to implement the present invention is not limiting of the 

10 present invention. Thus, the operation and behavior of the present 
invention will be described without specific reference to the actual software 
code or hardware components. Such non-specific references are acceptable 
because it is clearly understood that a person of ordinary skill in the art 
would be able to design software and control hardware to implement the 

15 embodiment of the present invention based on the description herein. 

Because the embodiments described herein operate on PPP packets 
encapsulated in HDLC frames, FIG. 5 illustrates the various attributes of 
such packets. The beginning (and end) of the frame is demarcated by a 1-byte 
framing flag represented by the hexadecimal character "7E". The following 

20 two bytes indicate the protocol address and control field which, for standard 
PPP packets, are typically designated as the hexadecimal characters "FF" and 
"03", respectively. The next two bytes indicate the protocol type, such as, for 
example, the LCP protocol, denoted by the hexadecimal characters "CO" and 
"21"; the IPCP protocol, indicated by the hexadecimal characters "80" and 

25 "21"; or the Van Jacobson protocol compressed state, indicated by the 
hexadecimal characters "00" (which may be compressed out) and "2D". The 
subsequent byte indicates the code or the configuration message, such as 
Configure-Request, denoted by the hexadecimal character "01"; Configure- 
Ack, indicated by the hexadecimal character "02"; or Configure-Nak, 

30 indicated by the hexadecimal character "03". 
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1. First Embodiment 

FIG. 3 is a flow-chart diagram depicting a first embodiment of the 
present invention. As such, FIG. 3 details the operation of the MT2 device 
104 for performing early protocol and configuration message detection in 
5 PPP packets. 

In step S305, the MT2 device 104, first scans an incoming data stream 
to detect the framing flag, indicated by the hexadecimal character "7E". This 
flag demarcates a frame and can, therefore, be used to indicate the beginning 
and/or end of packets encapsulated in PPP frames. If the MT2 device 104 has 

10 not detected a "7E" framing flag, it keeps scanning the incoming data, as 
indicated by step S306, until it detects the flag. Once the MT2 device 104 
detects the "7E" framing flag, it progresses to step S310. 

After detecting a "7E" flag, the MT2 device 104, in step S310, 
determines whether the next byte is also a "7E" flag. If so, the MT2 device 

15 104 skips that particular byte, as indicated in step S320, and returns back to 
step S310 to apply the "7E" flag test to the next byte. If the next byte is not a 
"7E" flag, the MT2 device 104 progresses to step S315. It is important to note 
that the incoming data stream may contain consecutive "7E" flags, as in the 
case of back-to-back packets where a "7E" flag, indicating the end of a frame, 

20 is juxtaposed to a subsequent "7E" flag, indicating the beginning of a new 
frame. Steps S310 and S320 operate to filter out the framing flags, enabling 
the MT2 device 104 to discern where the information portion of the framed 
packet begins. 

Aware that the next byte is not a "7E" flag, but an information byte, 
25 the MT2 device 104 in step S315, "unescapes" the next X number of bytes, 
where X corresponds to the relative position of the information sought 
within the framed-packet This unescaping is performed because, as is well 
known in the art, when the PPP protocol is transmitted with asynchronous, 
HDLC-like framing (i.e., as per RFC 1662), the protocol employs an "escaping 
30 technique" to mask certain characters within the information portion of a 
packet that also function as special control characters. Such characters 
include the aforementioned "7E" flag as well as the escape flag "7D". When 
these characters are encountered in the information portion of a framed- 
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packet the escaping technique stuffs the escape flag "7D" in front of the 
character and modifies the character in order to neutralize its control 
function. Therefore/ in seeking to detect certain protocol or configuration 
information from an incoming data stream/ the MT2 device 104, in step 
5 S315/ unescapes the number of bytes necessary to access the information 
sought in order to uncover its true identity. After unescaping X bytes, the 
MT2 device 104 proceeds to step S325. 

In step S325, the MT2 device 104 determines whether the unescaped X 
bytes include the standard PPP address and control field characters "FF" and 

10 "03", respectively. Although these characters typically comprise the first and 
second bytes of the information portion of a PPP packet {see, e.g., FIG. 5), 
these characters may be compressed out of the packet, thereby affecting the 
location of the ensuing information bytes. Therefore, the MT2 device 104 
must check whether these characters are included within the unescaped 

15 bytes of the packet in order to make the necessary adjustments later. If the 
characters "FF" and "03" are not included in the unescaped bytes (i.e., 
characters "FF" and "03" are compressed out), the MT2 device 104, in step 
S330/ checks to see whether these bytes contain the protocol or configuration 
message information being sought. If they do, then the MT2 device 104, in 

20 step S340/ forwards the entire packet to the MT2 device 104 unframer, in 
order to unframe the packet and engage in the processing indicated by the 
detected information. If the bytes do not contain the information being 
sought, the MT2 device 104 sends the entire packet to the MT2 device 104 
transmit portion to be forwarded across the pertinent interface, as indicated 

25 by step S345. 

Returning to step S325, if the unescaped X bytes include "FF" and 
"03", the MT2 device 104, in step S335, compensates by unescaping another 2 
bytes, in addition to the specified X bytes. This adjusts for the inclusion of 
the "FF" and "03" characters within the X bytes. The MT2 device 104 then 

30 submits the X + 2 unescaped bytes to step S330, where, as stated above, it 
checks to see whether the unescaped bytes contain the desired information. 
If they do, then the MT2 device 104, in step S340, forwards the entire packet 
to the MT2 device 104 unframer. If the bytes do not contain the protocol or 
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configuration message information being sought, the MT2 device 104, in 
step S345, sends the entire packet to the MT2 device 104 transmit portion to 
forward the packet across the pertinent interface. 

To illustrate the operation of this embodiment, suppose the early 
5 detection of an LCP protocol packet is desired. The LOP protocol 
specification is provided within the protocol information portion of a PPP- 
framed packet. As indicated in FIG. 5, the protocol information is 2 bytes 
long, typically occupying byte positions 3 and 4 of the information portion of 
a standard PPP-framed packet. After scanning the incoming data stream and 

10 discerning where the information bytes begin (i.e., steps S305, S310, and 
S320), the MT2 device 104 unescapes the next two bytes (i.e., X equal to 2), as 
indicated by step S315. If, in step S325, the first 2 bytes do not include the 
"FF" and "03" characters, then the MT2 device 104 checks to see whether 
these bytes contain the LCP information being sought. If it does, then the 

15 MT2 device 104, in step S340, forwards the entire packet to the MT2 device 
104 unframer, in order to unframe the packet and engage in the processing 
required by the LCP protocol information. If the bytes do not contain the 
LCP information, the MT2 device 104 sends the entire packet to the MT2 
device 104 transmit portion to be forwarded across the pertinent interface, as 

20 indicated by step S345. 

If, on the other hand, the first two bytes of the unescaped X bytes are 
"FF" and "03", the MT2 device 104, in step S335, compensates by unescaping 
the next 2 bytes, in addition to the first two bytes. The MT2 device 104 then 
submits all four unescaped bytes to step S330, where, as stated above, it 

25 checks to see whether these bytes contain the LCP information being sought. 
If they do, then the MT2 device 104, in step S340, forwards the entire packet 
to the MT2 device 104 unframer. If the bytes do not contain the LCP 
information, the MT2 device 104, in step S345, sends the entire packet to the 
MT2 device 104 transmit portion, 

30 It is important to note that, by virtue of the embodiment described 

above, all of the header information contained within the PPP-framed 
packet can be detected without unframing the entire packet. For example, by 
simply adjusting the X value in step S315, this embodiment can detect such 
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PPP information as protocol information, configuration messages, packet ID, 
etc. 

Thus, this embodiment detects protocol and configuration messages 
within a PPP packet stream without having to unframe the entire packets. 
5 Rather, by unescaping certain bytes within the information portion of the 
packets, this embodiment provides a system and method that efficiently 
detects protocol and configuration messages without performing 
unnecessary PPP packet unframing/reframing operations. 

10 

2. Second Embodiment 

PIGS. 4A, 4B are flow-chart diagrams depicting a second embodiment 
of the present invention. This embodiment detects protocol and 
configuration messages contained within the information portion of a PPP- 

15 framed packet by scanning the incoming data stream and mechanically 
checking the information bytes in stages, without unf raining the packets. 
Given the format of the PPP-framed packets, as illustrated by FIG. 5, the first 
stage specifically detects the content of the 1-byte address field, contained 
within the information portion of the packet. The second stage is directed to 

20 detecting the contents of the 1-byte control field, which follows the address 
field. Accordingly, this embodiment is capable of advancing the stages, and 
detecting the contents of all information fields, until the end of the 
information portion. For example, a third stage could be directed to 
detecting the contents of the 2-byte protocol field, which follow the control 

25 field. However, because of the PPP-framed packet structure and the 
sequential nature of this embodiment, information contained in the later 
fields of the frame, is generally detected after processing and detecting 
information contained in the preceding fields. 

As a representative example of this embodiment, suppose the 

30 information sought is contained within the control field. To access this field 
and detect the pertinent information from an incoming data stream, the 
MT2 device 104 must first identify the beginning of the information portion 
of the PPP packet and then access and detect the information in the address 
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field. Only after processing the address field information, is the MT2 device 
104 ready to access and detect the control field information. 

As such, FIG. 4A illustrates the first stage of this embodiment. In step 
S405, the MT2 device 104 first scans the incoming data stream to detect the 
5 framing flag "7E". After detecting the "7E" flag, the MT2 device 104, in step 
S410, determines whether the next byte is also a "7E" flag. If it is, the MT2 
device 104 moves to the next byte, as indicated in step S415, and returns back 
to step S410 to apply the "7E" flag test to the next byte. If the next byte is not a 
"7E" flag, the MT2 device 104 progresses to step S420. As stated above with 
10 respect to the first embodiment, steps S410 and S415 operate to filter out the 
framing flags, allowing the MT2 device 104 to identify the beginning of the 
information portion of the PPP-framed packet. 

Once the MT2 device 104 is able to identify the beginning information 
portion, it exploits the format of PPP packets to detect the information in 
15 stages. As stated above, the first stage of this embodiment is to detect the 
character "FF". 

In step S420, the MT2 device 104 checks to see whether the first 
information byte is the escape character "7D". As indicated above, the 
escaping technique stuffs the escape flag "7D" in front of certain characters 

20 and masks them. If the first information byte is not "7D" (i.e., the first 
information byte is not escaped), the MT2 device 104, in step S425, checks to 
see if the first information byte is the "FF" character (i.e., in unescaped 
form). If it is, the MT2 device 104 proceeds to step S435. If first information 
byte is not the "FF" character, the MT2 device 104 determines, in step S426, 

25 whether there is more information within the framed-packet to be sought, 
and if there is, the MT2 device 104 moves onto the next stage in step S427. If 
there is no additional desired information, the MT2 device 104, in step S428, 
sends the entire packet to the MT2 device 104 transmit portion to forward 
the packet across the pertinent interface. 

30 Returning to step S420, if the first information byte is "7D" (i.e., the 

first information byte is escaped), the MT2 device 104, in step S430, checks to 
see whether the next byte is the "FF" character in the escaped format (i.e., 
hexadecimal character "DF"). If it is, the MT2 device 104 proceeds to step 
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S435. If the next byte is not the "DF" character, the MT2 device 104 proceeds 
to step S426 where, as stated above, the MT2 device 104 checks to see 
whether there is more desired information. If there is, the MT2 device 104 
moves onto the next stage in step S427. If there is no additional desired 
5 information, the MT2 device 104, in step S428, sends the entire packet to the 
MT2 device 104 transmit portion to forward the packet across the pertinent 
interface. 

If, in step S430, the next byte is the "FF" character in the escaped 
format (i.e., hexadecimal character "DF"), the MT2 device 104 proceeds to 

10 step S435, where it checks to see whether there is more information to he 
sought. If there is, the MT2 device 104 moves onto the next stage in step 
S427. If there is no additional desired information, the MT2 device 104, in 
step S437, forwards the entire packet to the MT2 device 104 unframer, in 
order to unframe the packet and engage in the processing indicated by the 

15 detected information. 

After completing the first stage of the embodiment (i.e., the detection 
of the "FF" character in the protocol address field), the MT2 device 104 must, 
consistent with the object of the representative example, endeavor to detect 
the "03" character in the control field. As noted above, this detection is 

20 referred to as the second stage detection for this embodiment and is depicted 
in FIG. 4B. 

Upon completing the first stage, as indicated by step S427, the MT2 
device 104, in step S440, determines, once again, whether the next byte is the 
"7D" character. As stated above, this determination is used in case the 

25 characters within the relevant information field were escaped. If the next 
byte is not the "7D" character, the MT2 device 104, in step S445, determines 
whether the byte is the "03" character (i.e., in unescaped format). If it is, the 
MT2 device 104 progresses to step S435 where, as previously noted, the MT2 
device 104 determines whether there is additional information being 

30 sought, and if there is the MT2 device 104 moves onto the next stage, as per 
step S427. Otherwise, the MT2 device 104, in step S428, forwards the entire 
packet to the MT2 device 104 transmit portion to forward the packet across 
the relevant interface. 
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Returning to step S440, if the MT2 device 104 determines that the 
following byte is the "7D" character, it checks to see, in step S450, whether 
the subsequent byte is the "03" character in the escaped format (i.e., 
hexadecimal character "23"). If the subsequent byte is not the "23" character, 
5 the MT2 device 104 proceeds to step S426, to determine whether to move 
onto the next stage, as in step S427, or send the entire packet to the MT2 
device 104 transmit portion to forward the packet across the pertinent 
interface, as in step S428. If the subsequent byte is the "23" character, the 
MT2 device 104 proceeds to step S435 where it determines whether to move 

10 onto the next stage, as in step S427, or forward the entire packet to the MT2 
device 104 unfrarner, as in step S437. 

Thus, this embodiment detects protocol and configuration messages 
within a PPP packet stream without having to unframe the packets. Rather, 
this embodiment scans the incoming data stream and mechanically checks 

15 the information bytes in stages. These stages correspond to the information 
fields of the PPP-framed packets and, therefore, this embodiment detects the 
desired information sequentially without performing unnecessary PPP 
packet unframing/ refraining operations and without ignoring messages 
affecting link configurations. 

20 The foregoing description of preferred embodiments of the present 

invention provides illustration and description, but is not intended to be 
exhaustive or to limit the invention to the predse form disclosed. 
Modifications and variations are possible consistent with the above teachings 
or maybe acquired from pradice of the invention. Accordingly, the scope of 

25 theinvention is defined by the claims and their equivalents. 

What is claimed is: 
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CLAIMS 

1. A method for early detection of configuration information of a 
2 predetermined type, said method comprising: 

receiving, on a communication device,, a plurality of framed data 
4 packets, each of said framed data packets containing an information portion; 

detecting, on said communication device, a beginning of said 
6 information portion within one of said framed data packets; and 

determining, on said communication device, whether said 
8 information portion contains said configuration information of a 
predetermined type, 

10 wherein said communication device unframes said one of said 

framed data packets when said information portion contains said 
12 configuration information of a predetermined type. 

2. The method of Claim 1, wherein said detecting includes 
2 scanning said plurality of said framed data packets and establishing said 

beginning of said information portion for one of said framed data packets by 
4 identifying a frame-demarcating character. 

3. The method of Claim 2, wherein said detecting includes, 

2 unescaping, on said communication device, contents of a 

predetermined number of bytes within said information portion, and 

4 determining, on said communication device, whether said contents 

of said unescaped predetermined number of bytes includes predetermined 

6 characters, 

wherein said communication device unescapes contents of additional 
8 consecutive bytes, succeeding said predetermined number of bytes, when 
said contents of said unescaped predetermined number of bytes includes said 
10 predetermined characters, and 

wherein said communication device determines whether contents of 
12 said unescaped predetermined number of bytes and contents of additional 
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consecutive bytes contain said configuration information of a 
14 predetermined type. 



4. The method of Claim 2, wherein said detecting includes, 

2 determining, on said communication device, whether contents of a 

particular byte or bytes of said information portion contains information of a 

4 type associated with said particular byte, and 

determining, on said communication device, whether said contents 

6 of said particular byte contains said configuration information of a 
predetermined type, 

8 wherein said communication device progresses to a subsequent stage 

when said contents of said particular byte lacks said configuration 

10 information of a predetermined type and said configuration information of 
a predetermined type is disposed in a byte position subsequent to said 

12 particular byte. 

5. The method of Claim 4, wherein said progresses to a 
2 subsequent stage further includes, 

examining, on said communications device, contents of at least one 
4 succeeding byte of said information portion, said succeeding byte being 

subsequent to said particular byte, and 
6 determining, on said communication device, whether contents of 

said succeeding byte contains information of a type associated with said 
8 succeeding byte, and 

determining, on said communication device, whether said contents 
10 of said succeeding byte contains said configuration information of a 
predetermined type, 

12 wherein said communication device sequentially examines 

successive bytes of said information portion until contents of said 

14 succeeding byte contains said configuration information of a predetermined 
type. 
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6. The method of Claim 5, wherein said contents of said particular 
2 byte and said contents of said succeeding byte includes escaped information. 

7. The method of Claim 5, wherein said contents of said particular 
2 byte and said contents of said succeeding byte includes unescaped 

information. 

8. A system for early detection of configuration information of a 
2 predetermined type, said system comprising: 

a terminal device for transmitting and receiving a plurality of framed 
4 data packets, each of said framed data packets containing an information 
portion; and 

6 a communication device coupled to said terminal device, 

wherein said communication device detects a beginning of said 
8 information portion within one of said framed data packets and determines 
whether said information portion contains said configuration information 
10 of a predetermined type, and 

wherein said communication device unframes said one of said 
12 framed data packets when said information portion contains said 
configuration information of a predetermined type. 

9. The system of Claim 8, wherein said detecting by said 
2 communication device includes scanning said plurality of said framed data 

packets and establishing said beginning of said information portion for one 
4 of said framed data packets by identifying a frame- demarcating character. 

10. The system of Claim 9, wherein said detecting by said 
2 communication device includes, 

unescaping contents of a predetermined number of bytes within said 
4 information portion, and 

determining whether said contents of said unescaped predetermined 
6 number of bytes includes predetermined characters, 



WO 01/019027 



PCT/USOO/24623 



21 

wherein said communication device unescapes contents of additional 
8 consecutive bytes, succeeding said predetermined number of bytes, when 
said contents of said unescaped predetermined number of bytes includes said 
10 predetermined characters, and 

wherein said communication device determines whether contents of 
12 said unescaped predetermined number of bytes and contents of additional 
consecutive bytes contain said configuration information of a 
14 predetermined type. 

11. The system of Claim 9, wherein said detecting by said 
2 communication device includes, 

determining whether contents of a particular byte or bytes of said 
4 information portion contains information of a type associated with said 

particular byte or bytes, and 
6 determining whether said contents of said particular byte or bytes 

contains said configuration information of a predetermined type, 
8 wherein said communication device progresses to a subsequent stage 

when said contents of said particular byte or bytes lacks said configuration 
10 information of a predetermined type and said configuration information of 
a predetermined type is disposed in a byte position subsequent to said 
12 particular byte or bytes. 

12. The system of Claim 11, wherein said communication device 
2 progressing to a subsequent stage further includes,, 

examining contents of at least one succeeding byte of said information 
4 portion, said succeeding byte being subsequent to said particular byte, and 

determining whether contents of said succeeding byte contains 
6 information of a type associated with said succeeding byte and whether said 
contents of said succeeding byte contains said configuration information of a 
8 predetermined type, 

wherein said communication device sequentially examines 
10 successive bytes of said information portion until contents of said 
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succeeding byte contains said configuration information of a predetermined 
12 type. 



13. The method of Claim 12, wherein said contents of said 
2 particular byte and said contents of said succeeding byte includes escaped 
information. 
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(57) Abstract; A mobile terminal (II) lias a 
built-in or mounted UIM (12) having a plurality 
of storage areas. Upon reception of a delivery 
request from the mobile terminal (11), a content 
server (19) delivers a program and data used 
when the program is exceutcd or a single 
program unit via a network including a radio 
network. The program and the data or the single 
program unit are stored in a storage area of 
the UIM (12) without passing them through a 
control block of the mobile terminal (1 1). 
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©M£gtf-5£, dtliC^^HT. 7Jj-<^-'>3>^7^fe^P^7A 

4TfiDUIM12COHT, #K*7~n ^5'40-l-40-6rt©^7'n^7 

7^T^-ya >M©& o fc7°D 7' 5 A © T © IHa ifc U I MH^^TJ 
?r^-y3>^7©li^gi5t, iiflt-A l 6 IS, 7°n i/7Affl 
7^T^^-y3>fS7Lfci©Itt^3>f >7t)— /tl 9fc:£t§ 
7S24)„ H ©«*]&, 7^7^ fc^P^^AS^f £ 

[1. 4. 1 0 J 7VT^7^f^^y3> 

UIM12 fcM$n> wt$nfcyD^7 (t^7^t^^ 

- -> a y- Deactivation) ) I" 5 £ £ # jfcg £ £ 5 £ £ £ . #SH* 
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SSB* 1 1^^1/V7 h^-FibTifbSii-5yD^7i>^U IM1 2 Kl&artS 
fiT£0> ffflUIMl 2^a"f^S:*L£J:5&l§T£5= ^ 
©ii*©M£»o fcn.-1f j&* 6 ©M £ J; Or^y^r^-ya >**iS®iS 

5 -tf^jffiMMLT^ «fc 5 ?5:4g-er**a5-5c £©*§£, © J: 5 +J- - fc? * 

[1. 4. 10. 1 ] BBftfStf-A^Ox-f 7#tV ^-v'a >3?:£ 
10 n >x >y*y-/i 1 9 B\ IM1 2tifitfcyD^7AC^^Tf ^ 

7 $"fj -sb y&ffO'&m&^Vtzt^, fCUIMl 2 t^f^t JftS^P 

x y y s 3 1 ) o 

[1. 4. 10. 2] U I MM?x-f T^r-f ^-ya 
15 MMlr-A- 1 6 tt, ^x^^r^-J'H^f^firtSi, 

?4 7 $ ^ 4 3 >S^K,t^Tl*£Sn&U I M 1 2 

tlfcfi*7*a y # ^IT, ^CDU I Ml 2^gStfcli(*3l$ntt 

1 l i:r>f7^T^^-v3 >It^S§ (X7-??S3 2). £ ©^ 

[1. 4. 10. 3] 7 ^-~>3 >^7JtS^ 

UIM1 2tt, ^D^7A«f^f7i'7-f^"->3>?:^i§t- © g £ ^ 
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3). ZL<om®&> x-f 7^^-->3 >^7b£7°P^9A£#5£iT£ffif 

[1. 4. 10. 4] t'r/^f^" ->3>tc7M 
5 mt! : S1t-A 16tt UIM1 2*^Pi/7A©f^7i'7^^-ya> 

10 x-Y 7 £ =7-4 3 >^7©M£^-i> t, Sffl-y— A' 1 6 te, 7^ 

7^-5-^— > 3 >*s^7 Lfc^©M&n >7">7-y--;^ 1 9 
y S 3 4 ) 0 
[ 1 . 4 . 1 1 ] g'j|$ U—tfsmut) 

^ffitt-ftS tlfc^nif 5 Ata, UIM1 2 ^©^^U ^ it KHg/B LTVs 

itTb^5 dfcKT^&^o a—tfj^ffi^fcU I M 1 2 n<D~? u if => A&'&mis 

20 

25 ar> ^--y^^st^ d ^n^^A^g'j^^nsi&^cioviTH i o 

[ 1 . 4 . 11. 1 ] yoi^AMM* 
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tir£ 0 d©ffiW^-3."P15D 1 1 li, 7°o ifyJ+vmis&'iT j n >x >y 7*n 
/U^»3>f>7t-Al 9 j3> &^#t^^ 5 %OT?a55„ OL-ifdtabS 

Wyh) IJ i^f & ^ y h 7 - f ^ ^ L T 3 > f > !V t - A* 1 9 t If t S (X 
10 T77 , S4 1). ^©MiL M©M^Tfe£7°n^A£#;i£^£M£^r 

7*n if y Ktmwi^<Dmm^w^^mwm% 1 1 ©^t^kse 2 1 fcn, 

0 1 5 o (eiBfli^tTSa ^i&S^ii®D 1 3 a^isstis . 

[1. 4. 11. 2 ] laff Mlf-A^©^ 7^ 5V ^~~> 3 >^>j< 

1 6 \Z% LTx-f 7^t^ ^" =y a >^3ft&Et£ (Xt»;?S4 2). ^ « 

y fyj- 4 ^~-y 3 >Mtt, 7°n if Aims-MLT^:}- — -if ©©I6#fla* 

[1. 4. 11. 3] U I M^©t-{ 7^f -i ^"">3 >f ^ 
20 SBfffffllt-A 1 6 x-f 7i? < — ^a >M&Stfax£ t > 

- x & #M & c: t fc i d » si i^ftT & § 7° □ if ^ h £ nfc** ^ □ 

fit, 7°n if 5 A»J|^£^^LT^*a-if ©©Ifrftw* l lfc 
£ £ (XT7^S43)» 

25 ei©^ 7^?t^ ^-->3 >Mta, mmfaw^ i i i m i 2\zm 

□ y i7<Dtz® fcfflit$nfcsftft7 ^ ^£ "i" "o" fcggiE-rs- 
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[1. 4. 1 l. 4] f^7^r^-y3>IT^I 

UIMl 2(1, ^©i^fcbT^D^7A«7-f7?7^->3>£l^5 

<t, ^CDg^TST^^ 7^r-f ^-^3 >^7M£KflM-y— A 1 6 fc^L 
TSUbTS (7T-y/S44). ClCDji^ta, A *7 % 7~ 4 — v" 3 ><Dftt>tl 

5 &7D^7£©M?QT&5»#7n 7^ A.ws, 

[1. 4. 11. 5] >^TM*0 

1 6tS, UIMl 2^^n^5A©7-f7?T^-y3> 
& 7 Si ft £§#5 £ . x — r^^^^^v 7 # 7 — 7 5=1 >3& T fl^D fc J; -3 
T*l£3ft5u I M 1 2 ©S:£7n *> 7 fc^^B Lfc-Mic, ^777^^- ~> 
10 a >*«^7LfeSoff l^lit^o 

bAt^©ffi«3 >7>^l7-A* 1 9 (7r«;^S45). 
[1. 4. 11. 6] BBMSU— A^©Hl£g# 
3 >x>^'S--A i 1 9 fc£, mBtiMtte^TUZ 7o 7 7 AI^HT07^ 7 

15 7 7^<-^3 >^7M£l3{fMlt-A'i e^esw^t. ^-©7p77 

ACiJi^MSIrffiM^-^ 1 Ur«;/S 5 1). 

[1. 4. 11. 7 1 U I M^©MM 

BBiiMlt-A l 6 ti, £©7n77Aii'Ji&M£gM£ t, 7n77i7&l 

|Og|ft^5a-+J©UIMi2«LT, 7P77A§j[i;M£g!£ 

20 77^552). £©7 a 77 KUW^ikU, ffl mnikT* % % 7 □ 7 7 A ©tS-tt 

7n7 7Z7#J[&i£5]U3:. &3&#SB* 1 1 §^ttui Ml 2fcg54aS. U 1 
Ml 2!1 7n77AimM£cfcoT#£$nfc^*7p^7l*i©7D77A 

25 [1.4.11.8] wmmT^ 

SEftMU— ^1 6 tilts (Xf»^S5 3). £©'«^71£0tt, 7p 
if 7 A © B!Mfc Sfr o feS* 7 n ^ 7 £ <k $J B£ b fc 7 a if 7 A £#£T 5 tt SB £ 
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^W*. ^tlfc^V^ ilf«*ll©j^X^!/'fgf!2 ltd, 015(1 
[ 1 . 4 . 11. 9] Si'Ji^TfiSl 

l2MaU--/S 1 6 tt, UIM1 2*f)||ITI)fl*f^St, ^—3?^- 
5 X*, mWtmkVTc=L- -iffcJctXllKiSftfc^P^ 1*<D ft fa I, 

^LT, gaff Mlr-A 1 6 ^D^5AOil^7Lfcg0l^S3> 

[i. 4. 12] « (iam^s-y--;^MRt) 

[1. 4. 12. 1 ] U I M^©^-f 7t?T4 ^>2 >^5R 

20 fcitS. ^od«^, IHfiMlr-A 1 6 K, - 

0 , »|^ttD7'D ^7 AtfltSnfe^BU I M 1 2 ^ n & K & ^ T I'J 

25 

T^7^7^->3>I*il Mft^* 1 1 SrrfrLTU I M 1 2 fcS &n 
5. UIM12B, 7^7^7^-y3>^ti^^^fcI$7'D^ 
^fcftjfcLfcfifitfc:??^* "l" ^6 "0" icgM-TS. Sil*7*n 
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y # 1*3 0 7 D £f 5 A © Sfr & Hilt £ 5 . 
[1. 4. 12. 2] ?4 7?T4 ^~>-3>$:7m& 

5m ^--> 3 >h7M&mmi}--a i 6 izmmrz Uf?^s 6 2). 

5 [1. 4. 12. 3 ] -r ^ — 3 >^7ffl^0 

gaflmsit-Ai 6 §ij^^^ts-S7°p^5a©sb^^^6x^ TZTj 

10 Ufcg©M£3 >T->y-y- — A 1 9 afy^S63). 

[1. 4. 12. 4 ] iifllJ— /^©ir-f 7 2? v* 3 >§Itt 

□ >T->5/+J--A 1 9 12, /t 1 6 3^67*^ v-a >^ 

7©M«tj'« SBMWfflit-n 1 6 \Z*r4 7 $7-4 ^-~>a >M»ftr 
(7,T77°S 6 4) s 
15 [1. 4. 12. 5] U T MAfflSJil^t 

iEIf 1 6 r^7^r-f^"V3 >^lIft&Sftlt ; 5i, ^ft 

07Gtao&T-f7?f^^—>3 >^TSSD©SM7nTS§#li#^^ 1 1 iz 
SbT, :/n^?A©H'm3S:££3t5 (7r^S7 1). ;i©$iHM*ll 

20 t5fi§^^T^i5 ^ 

UIM12I1 1 1 £^bT]«M£§W-^§ t> CtLit J; D # 

[1. 4. 12. 6] HiJKsiKTJE^r 
UIM12H, yo^^iolfl^ixSfc, *©W&^TiJM7M£ffi 
25 If fiti-A 1 6 lzmmt% (Xf«^S7 2), ^©Mte, 7° n i? y 2* <D M 

[1 . 4. 12. 7] fJH^7M 

g2HfS1i— A 1 6lt HiJ^^^^D^^A©^T©iB^^^6iJ^^7H^a 
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n m t , ? □ ^ ? a ^fiy p£ $ ft£ a © 'its & Mir s . 

[1. 4. 12. 8 ] MWH^-A^OiiiJPfcSfMMftF 

n >x>7-y--;t i 9 a, saMs-it-n ^ui^Twiasfiti^ 

10 t, MM^-A l 6 MM*SffiM&3£§ (^f y^S7 4). 
[i. 4. i 3 ] u i m©a->? a >fil;ft5 -Ju if =y Aiei M 

15 iiViT, ii^fc^©7°D tf^&HfimttZ n&^T©a — ifCOU I M 

i 2 i;A-/a >7^y^©^n^7A^ian-r§ us. firt& s 

uiMCf IT, A~v 3 ^ijjiS*^ Bti, utii:^t§uiM©f£;f 
^HT^n if 7 AOBBBSfrS ^^^©^Jgr^frtotiSo 01 2 Kitt 

25 ^snt^s. uimi 2fcB, ;t-^ 3 i-'MMr^L ta^u i 

% © £ HI 1 2 fcli, ^-©J: -5 &8lfE £*tf#— M/TliiiU I MtA-y 

3 >m^mstm^nt^t^<DWs^t, torn stzmmzn-nz- b u-r^fc^u 
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[1. 4. 13. 1 ] >31JD«gH£-y-^- hLTViSU I MfcPsg»Lfc 

Hi ft 

[i. 4. i3. I. i ] mm ^m^-^^^yoify^mmw^ 

^/U6Cg4 Uf^S8 1). 
[1. 4.13. 1. 2] UIMA.©A-i?3 >ffl^0g3fc 
10 @Hffi?Mlt-Al6te, 7°n ^ ABBffrSg^Srtfl&S t, 5-'-*^ — X£# 

fc^TCD^Sj*^* 1 1 ftiS 1 1 \zn — i?a 

[1. 4. 13. 1. 3] M-i? a >M 
15 ;^^3>iaS*Hflift«*l lS^bTUIMl 2fcSStl5. UIM 

12 it, ;%-v=i >m%immt%:rtm% t, ibcda— /3>£iifit^n 

1 6 fcMlTS Ur-y7S8 3). 

[i. 4. i3. i. 4] -?u if^i^um^m^ 

1 6 ti, I M 1 2*6/t-i?3 >I^0Sf lti§. L T , 

tte7° P if 7 Affile £1"* - t^^WSi^afeS >r>yt-/^ 1 9 

tlS (X:ry 7*S 8 4). 

Sfc, ioS5U I M 1 2 ^6^!tS^fc;t-y a >M# ? ^ >r >^if-/X 

■tf— A* 1 6 «U I M 1 2 H^fS^D^^AOiSBMfeff 5o £©^1§r©iJj 

[1. 4. 13. 2 ] b LTVifrUU I MfcML 
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[1. 4. 13. 2. 1 ] ia{fW«-A f ^©7°P ^7 AffillMt 
n>x>y*tf— l 9 1t jSHffl^a-y— A i 6 fc7°n^5 A©1! 

(T^y 7°S 9 l)o 
5 [1. 4. 13. 2. 2] UIM^©A"ya>iaiIi 

MMU— /t 1 6 ft, ^MWWsJf. 1 1 ©U I M 1 2 tf LT> n — V a >S 
7°S 9 2 ). 
[1. 4. 13. 2. 3] 9-i-?%tr>h 

C&^T, UIM12H, n-i? a >MM Mffi&iJ-sS- t- ITU 

ITLfe^ttt (AT7^S 9 3), MM#^1 1 ©U IM1 2 fc^L 
T , A ~ v a > fr ~J (Xfy7'S9 4)„ f LT'J ]-5-f*^>?ffl 

TL/cS^Efi Ut-^S 95), WS^iftttSS* 1 1 ©U I Ml 2 C^Ll, 

a-v 5 3 >mmwM&ftv (7f^s96). fitn5^*c? >^ ©ii£ 

i fc'frJSJiiSits. 

[1. 4. 13. 2. 4] 7"n^:7AlBfi^«JM 
20 W\ MfclH^iM*- A 1 6 B, ^-f ^SSIIl, Sr£©^<A7^fBt 
Bii»Tbfcg^i:tt (Xr77"S 9 7 ), MMM* 1 IfflUIMl 21; 

^Ll\ U ;&£>*©fiia s Br£©4ft {^©^©S^tJ: 3) tft^fet-g, 

25 iBMgit-A 1 6 u iMi2©/t—^3 >^3>r> , yf-;ti 9*^1 

#LT7°D^7Affi«^pIM^^fT^ "7°S 84). 
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u i m i 2 ©^ ; EU^gictti5s#At*5fc«> l □ y^yy^-n i 9 Ht/d 

[l. 4. 14. 1 ] @alffWS1t-/^t£stf 3 U vx^ f 
□ >T>7t-n'l 9tt, Slt5^D^7ASjS#l/T, UIM12a©^ 
of^AB^Sfiffifl^-AietiS af*;^Sl 0.1). 

1511 flf-n l 6 ©j-?^-xi:a, U I M 1 2 «t^-CD^ ^ ij ©tttK 

io ^^-rifffl^sig^tiTiris. Bd«^a*-ni 6 ti, ^suimu^^d 

P7if£g!r#aiJ, fe^t^fi, 2gUTU5S$7'ny & $> & n & ? A 

U^a^J&C £3 7*P7'7 AKH^F"Rf»ftl&3 >x>y3— ^ 1 9 CMS (7,x 
^S102). 

ia ^tS}GSt§. 
20 C 1 - 4 . 14. 2 ] U I M }; $5 (t ^ 'J y i ? f 

E-fff a-y--A 1 6 ©T-M-Xtlt U I M 1 2 ffifc-f-©;*^ U ©g£g£ 

25 merrs. 

lBMMii--/t 1 6 tI5 Uff^Slll). 

MM^-A 1 6 f^^^-XS#Ib, ffifi*©UlMl'2®i*^ 
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o v $ D > S*^p y # ©M^ + ^TfeS^^^USif-t 5. 

^©^JHfM^^ ! ye s j -e&s^^ @ajg^g^-ni 6it yD?7&& 

M Lfcff&^MU I M 1 2 i~5M3 (.X-7 »;ysil2). 

®^ fcU I M 1 2H tt^MM-tt£tlfc7°tt>f 5 A £ UlT 
5 p y & fc^jWmffiTSS^S^S^JSrrfS, ^ IT, d ©-^JUtM^ 

# r N O J Tf feSS-g-, U I M 1 2 gEfsM-tf— n 1 6 tfLT^t 'J §1 
^Mt±§^P^5ASfi^ pJiUfl^iiS (7r^S113). 

Ef' 7°P ABBMnfilftlS^ >x>^-U--A 1 9C15 Ut^SI 
10 14), 

UIMH©^'] Of i^i^-^^tU rA-f^icfeootifcJ: D, S 
@14l;*^§7?y^S 1 2 1 ~ S 1 2 4^ 01 3©Xf»r/S 1 1 1— S 

[ i . 4. is] mmmftm 
eat, *mmn(D^fc®W!ftmtezj^TmwT%<> 

20 [1. 4. 15. 1 ] U I MCiftS nfc^D ^5 A©Hff 

d©llfE0!|Tfi. U I M 1 2 (0S*^D*; ^ 4 0 - 1 fc "OOM" 7" □ ^ ? 

' (4, ^Sbftja* l l mmfcB 2 2 ^}|fP1-5 IttiO, "OOttI" 

25 * y W SB 2 1 1 6 fC^T £ O &IBft^zL-ifflKD 2 1 

^©MHIt^^rL-iaMD 2 1 3 >t^>!V 7°D A< ^©H >x>^1i- 
-A 1 9^6S^^nSfeOT?*«. 3--lf £©@Elf ^-a-IlD 2 1 © 
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d©^H, ^->>0-b'll®D2 2ifiZl y^yy^-A 1 9^S#»#S5fcl 

n. ft 6 ©4" j&* &flfg©/?y & S'KtS d©Il#!£ftfc 

£> ft5„ 

£#lift=SJfi* 1 ll'SiS. £©*S3I, HffiD 2 3 # & Sf # SIS 5fc 1 1 ± o 
£tl&<, n — ifK, HD2 3F f 3©;*~n-© c f ] ^ 1 3 "UIM^-a-^6SR" 
£SJ?t5*tKJ;D, U IM1 2^©^D^7A§ifflLTft^t:tT-K t)55 
tSt?B> £©M£fr~5 t, f©|Oltt^UIM12tIBtlS, 
15 d ©M«tf fcU I M 1 2 ©fflfflgpfcl, l*?n^ MO-1-40-6 fcfg- 
i$jlTli5yD^7Affl U 7s 1 1 fcSlOigT. ^IT, H© U 

X l^-^trHSD 2 4^#«j#Sm^ 1 1 ©7^ ^^KgP2 1 fc^sns. 3. 

— s's&tccDu 7, h\zma % ntzy° u ? ? &<d * & z izmr % <d %m$iir % 

20 21 ©&MM#JxJfS.*7*n y 5 4 0-2 (D7"n^7AlS4 1 0 7 O ^ 
- 2 ©x-*«#U 2 6tlS 0 

25 fcI5„ tffl/V'Ja-r-^e, ME^, mmmWi, n.-1f©i£ 
fft«f ©ttM#A,-C&tK ^«F#iffl* Hi^UlM12[;i6n5 a UIMl 

2Tii e: © /1 y zl - X - ^ # "OOM " ^D^^Afci^tfii^ns^t 
fectS&SJii^e, H 7° u ^ 7 A tc*f JS t & S# 7° o v 5 4 Q - 1 <r> - 9 m 
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it 4 2 te/fU a-j-i'JIStS. 
[1. 4. 15. 2] H!7"^§iflJfflbfcIiKjS! 

5 tfH, MM* 1 1 ©&fE-j}P 2 2 feSfP'T* El t ± 0 > 3>7>7-/ 

13 l 7 \z?!k*tmin* -3. -HMD 3 l^gf ^©IBIt^-i— BID3 

17 111 ttltflfel^l^n-y^iAS, OOOH) SSKtSt, 3iA^ 

15 #«)#^* 1 1 tSIOig-T- «Pi0D 3 2*^>r X^H-SB 2 1 fc 

UIM12 ©S*^n»;i7 4 0 - 3 t 5 *IT 5 X X Hfr © ifc 
5^7°D^5A#U IM1 2rtCD®W^3 0 tidT^iSn, MBSD 3 4 & 

20 

fit, IS^STt^t, 5l^f#£ MflSMMD 3 6 

25 ^-^;in£ML, ^©scA^fcfxS w\ mm*i us, a 
[i. 4. i5. 3] m#m (&*lm : -7~^7)]smmm 
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#5lMMfc£^T«, U I M 1 2 <^tC 

TOOit^J SSRt-S. £tl£J;D, UIM1 2 00Jii3 OH, s*^d^ 
#40-1 ft©OOM©7 □ if? A&Uff 5^^^yi^-<i52 1 j* - ;x- 
IID4 2 $ ^>7s $ i* S . 

10" *II?t5i> gMKMMWD 4 3 ifiSSn, ^.-If tSKS^-To 
15 :x-+f BU^#> 2 3 £ff bTW\ gl 9t*tUIM^-a-BlD 

o&itj ^ints. incto, u i m i 2 ©si mas 3 o a, D y 4? 4 

0 - 1 l^lOOOftliO^D^^AS^ffL, f 4 * 7 U ■< SB 2 1 l^-a-»S 
20 5i^ny7A©-aBT355^W#^P^7A^*11B^3 0 tiolElsn^ 

^lt, wmm 3 o a, ^sn^p^^Att^, &*L®s©fcs6©iim£ 

(1) *3Si/afc3Hiffl^SffiST§. 
25 (2) 3!(*Lffl'J-^/^-1'^^StgF#:S8*l 1 «M tiiT3 ^©itfl £^ 

(3) f£8j#Sgf*i 1 >^«5;:PT£M£SMTii£^ft bTSML/H 'J 
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^SBID 5 3 £3S^£i±£ 0 

5 32i t^sns. 

tLTftSgSSASi^tH, JtgE (4) ©Mfc&liT, ffiJB L §1 

n . 4. is. 4] ■. nwmmm 

l&Witf&feZ ntc t ts. ccstciffii^wjc^t&s. tab?, g»ils 

CKDlg^ UIM12T11 GOM7°o ^ A© — HE^ & 3 /Effl # 7° n ^ A 

20 I M fc Sg {* t % fin T % >0 , @ f ] W M * M fc & If & ft Jfl £ ^ S £ t & ft ^ <D T? , 

25 ^-iFCDffiViJi&MlfilJt-r S £ t#Tt5„ 
[2] IS 2 MM 

±fBH 1 ^WliCt^Tlt U I M 1 2 ti^T^fr^n^^D ^'7Att. 
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[WIU I Mfi©»^7*P 5/^40-1-4 0- 6 iZ&mt<Wt 0 #*JE^m 

T, U I M 1 2 tt, -Sff t"S if? AOttTS^f L fcS*^ P v £ fc&Sfc 

r 2 . i ] m 2mmmm.(Dm^ 

0 2 1 fcH, UIMl2t, n >x >*/+!-- A 19-1-1 9-6 ££^19 

mm^'m^-Ai 6Ate^?tin§. gafi^s^-A i 6 ah, jtsetg 

10 frl TV* •&„ n>x>yiJ— Al 9-l~19-6:fc«fcrJCl 9XU, ±|B^ 1 

Mfltii^U IM12li, Hi liStMte£ S 7 tr — v 3 >£B 
15 11 2 BtftU, 0 2 2 t^t7-;iJfr->3 >M 1 2 C*§^TH§. 21 
CO :/ P ^ 5 A f3HM 1 2Ci3, 7 P O 7 □ », # 4 0 - 1 ~ 4 0 - 7 & J: 
1H07'J-S*^D»;^4 0 - F 1 5Ht & *T.T U £ „ 

^S^7'n 40-1-40 - 7 4a U -S^7*D 7?40-FlH, 

7 c^n^ni/7Al«4 1 iS^tfx-^fiSJM 2 &H^.TViS. 
20 7'o^7Agjj(4i(i, 7u{f?& >3>*5tMi7^Py h) 

H <0 JI # fc # I* T » I*^D*;^4 0 - 1—4 0 - 7 *3 «t 7 U — I*^D^ 
25 £4 0-Fl«, S^Caft-stLT* D, Jg" fl!l ftiJ fct , fe57*D7^7'n^7A 
S«41 K^M$nfc7 = D^^ A*«flfi©^Dy ^©-^-^^^4 2i;7^t7t 
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Hj&^OBB^ mmtzZZft? n t ttTtfttitf, T-?«4 2l;oiiT(t 

±13^ i mmn tmm-e&z. 

7iJ-|$^D';M0-FltQHTIS, SrifiMiJ— A 1 6 A T < > ^ 

- if © n n \z * ux % m. £ n « . 
±mm i iusMKi^TigmMu— a 1 e it 1 i ^ e>©@em 

10 M^jSDTP >x>^~A 1 9^6SiSnfc^n^7ASU I M 1 2 

^fe. ^^Mfc^SBBfSM^-A 1 6 AH, t£ll/#$8S5fc 1 l*^ni/ 

yD^7*5A*i#L, 1 lOUIMl 2(;idit§o ^HMMC^ 

tt«fi!«lraiJ— A 1 6Att, 3>f>y*-A*6UI M 1 2M5-/D^7A 

t-Al6t*ILtU5. L^L, *MMt;i &W-£MWW^A 1 6 A 

-A 1 6 A 13, U I M 1 2 CDrL-^©fcfct;'/D^'5 A 3; S ^ © fiff £ £ S^T'lf 

20 ^7Al^^Tlt o.--if raiBli^ai3--A* 1 6 A$HCT^©7°P ^^A&IR 
t#T£ Z. t**1f#5o £ C0;t^T@3ft^a-y--A 1 6 A [i, UIM12©&S£>© 

IBftM^-A 1 6 Aft, UIM12t^tS^D^7A0EiCfIt:-O 

25 ^s. ^©Em^ffiwssu s o a, 3.—*fmm&m%i5 1 ?mf^ 2±mm%& 
mm b 2 1 & m x x ^ 5 . 

^□^A'fff^l&lrt^S 2 tt, U I Ml 2 SBH pJIE 73; 7 D ^ y A * fe it 
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A A* □ > > y U— Al 9-1-1 9 - 6 © 5 ^ £* © 3 > > y If — /"? © <fc* © 7 

H^ni^7A*#©Uf n£7D#5Att3gfeSfi& 5 2 fc 1& ifft T 5 ^ 
5A'titM^*|5 5 2 ©MMi'S^T^fe^, £§Httfe'l^a^ + ^T 

ts^tbx, ab«a.-+F ©mm* i i ^ 6 -fu i??£><D mmm>k& 

:i-if'MMB[i 5 1 *^^^AA^jgffl$n« n A (nWI) ©n. — if 
fcftlgtfW 6nfcnfi©:i-ifB#JMf#$)Sl$ 5 3 - 1 - 5 3 - n £fi?LT43 D , 
15 £a— !fi@giJtt$g&iiftg&5 3-kte, Sffit filSteiifo SB 5 4 t, MIEffM^ 
mm 5 5 t 

-i--SWJ«iSMHIS 5 3 - k £Mfff1tfg*&M 5 4 te, a -if k © 

uimi2 \z%mz.mm^ntz.yuif'yh,\zn^.vr^t^ >*t-# 

£©#-<> 5? ■r- ^ © y n ^ 9 A ^ © © S J±^ © ^ n ^ 9 A © U R L 
20 ^fga^ntl^^P ^5 A'lf MM 5 2rt©XiJ74^t#<>^TSS ( 

^©*Eff 5 4 stLTi/JSfcfe, gsMs-f-/i 1 e &\t. uim 

1 2 0|*7 , n 7 ^4 0-1-40-7 \ZfoZ>7°Utf~> A rt* 35" # - £ 3 ft * 

^.-IffSS'l'ff MM 5 3 — k fc&ntSMSBflfitfgt&iM 5 5 n 
25 -if fc©U I M 1 2 tmsirSBm^tiTH^aUAi, a -if k j^SHI ^ 

U I M 1 2 iCl^fclfepfi^yo^^At^feLft^^y^T-^Sfat^. 
U I Ml 2©a-lfH, MMMM*ftgl$5 5 ZmmVTc&V ± Sfctf-tf 
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a. u I M 1 2 ^©Eff Z^W.-fZ 7°n ify A©^< > D®ift 
sSjSri-ftlf Wl&M 5 5KftiLtt)65. a-ifS, MSEIfff 5 5 1; 
# -f > ^ x - # £ la 7° n ^ 5 A ©SHI &>&m t' ^ £ £ £ ir s # 3ft 
* l l SfljlsxBBft fSf -/t 1 6 AK«)10SIS3^ @B4sM*-A* i 

l2l:EMt«. ^©«€r, u IM1 2tSi$nfc^P^7A©^O^T- 

b. U I M 1 2 |#g©a*^Dy ^ttgctC|ED36«fe« 0 l£oT, S*yti y $ffi± 
y tr&fcte t Ky&ffiiflm ^!)55c^ffli5fel^> MM*- A 1 6AB, 

niBftttisi&ai? 5 4fo<Dmmmm(Dot>u 1 mi 2fica&5i*^n»y?4 0 
- x fc^f^LfciBtt mm ft e^-r t, cm^Miamit 

15 *yoy^40-Xfc#ta*t, ^Oyo^7 A<B#-f >^-^ £^iait it 

5 4 ^©ffi^r^p y ^ 4 0 - x c&is Lf-mm^mYcm^'shn, cid^ 

SftflLSfc-fctK a— iFte, S*ya y $ j&tgtfrJKSgT £ S £ # £ > @3J1M 

7 U -S^7"P 7 ? 4 0— F 1 t^jSLfclaB flt^-Zt 1 6 A ©M 
t^ViTllfitS. g£!CKfi^& ± 5 fc, 7'J"i*7'Dr? 4 0 -F 1 K 111 k T 
H. MM*-^ 1 6 7n ^"7 A©ia<fPfcoM£ ban. n-^tt, M 

USfftSCtti^ B*!:7U-i*7'n-^4 0-F1M!)? 

a-^IHSiJMf&M 5 3 ©Sfegefl'ti MM Httt, U I Ml 2 ft CDS* 
7*0 y ^7 4 0 -F 1 ^n^LTcmmM^^Wi^htLX^^o Lfth, 
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- F 1 ^{nlfe^tt^nTVi&V^^rii, ifflg^^tT-^ (Nu I \ "r-t? 

5 U I M 1 2 CD 7 U 7* □ 7 4 0 - F 1 tS5^n^5AH t ti^TJ ^ 

-iSi^felS, ±|Hfi#7*n .^ 4 0 - 1 -4 0 - 7 tftfflsnTHS^n 

— 7&\ 7 0 -S*^P»; H0-F1 fcft5^P^7AS-iWti-f)J!l 

:®l&fc«UT, B3Mg-^-A 1 6 Ali, 7 U-I*?D v 7 4 0 - F 1 
7 U — S*7*0 -/ J40-F1B, a — If ©^&StCJ*;i;T^*7*D vHO- 

l-40-7£^-ttl)ft5 J:5l;ISt5 z: t^nTIBTfeSo tftbS, 3£ 
15 JEifftt. 7 iffll^ 7'P y ^ 4 0 - 1 ~ 4 0 ~ 7 ^itf 1 i©7 U - S*7"n 7 
7 4 0 - F 1 £ 8ffl«i*^D7 740-l~40-8t LTfUfflS^S El fc# 

^©^tCH. BiHaWSii--/'? 1 6AH.UIM1 2(Dy7rA«l 2A(1 
4#gg) fc7 U -i*7*P«; 7 4 0 — F 1 £1*7*0 y 7 4 0 - 8 tfEtfeg 

7 4 0 - F 1 fc&J&Lfc'biZ) £ LTlo T^feHEffM&lftglS 5 4 ft©M&, 

et&wu s*7*d y 7 4 0 - 8 izmfohtcmmt titu, ccs«4fflHT, 

S*7*D y 740-1-40-7 t^HTfTbnTU§ t> CD £ |WI C W S £ H 

So 

25 £33. ^O [ t5(^"f^-Bl*7 > D7^4 0-8t;^ILfti*7'D7^ 

ss^7'j-i*7'a^4 0 — f 1 trs-r^tfeRTigTabs. 1*^0-^4 

0-1-40-7 t7HTQ, 7 'J -M^Dy 7 tfST5 d H„ 
[2 . 2 ] Eft^SU— 
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0 2 3 KgEHlWSlf-A 1 6 A(DM$t%rtt° 
2 b, SI*. TV* 3. 

5 fci*frJPSE6 1 fcU ^§503 >x>^*y- — A 19-1-19-6 2fe5Hte&B& 
ftiffi* 1 1 too (n >x>y-it-A 1 9 - 1. ~ .1 9-6 -gH&#S* 1 1 ffiS 

Kfe^tfo) ©eai flatus fx a. Egaw6iii n-Hfftfs&M 5 

1> ^o^^A'Bfg*&#l^5 2S5&Z$*.*a.YmmfflW&6 3 ffi 2 HO © g ift $ « ffl 

^UifyA^mmmm 5 2 U I M l 2 Ol*7"n *^40-l-40-7 
fciHsSlfpIbTViS^P^^ h (Portal site) tH 

■fe + a 7 U 6 3«, 3 >x>^ #~A* 1 9-1-1 9-6 S 

nfcit$g (mmt-£n?ty°ri?fy isfcE) comm., fiinw^ssbTn§a.f 

H©ftMi:&£^SM©-(£e&3 ViHn >T>y*i- — A 19-1-19-6 (C*f 
fS&ll§!®©fimWiBS: £ %fr? . 
20 [2.3] f£2?»M©Sj# 

[2. 3. 1 ] ^-if'M&M^tDM 
0 2 1 fc^TMM ViT, 3 >x>^ A* 1 9 - 1 ~ 1 9-6(1 Sffl 
it-;U6AofiTtil55 t n-im, nn 6©n >5 L > l 7*tf— nt'fe^^ti 

25 a- 1 6 AvrL—vmmmmmz 1 fcast5!Ess*«ft5. ^ h 2 4£#n, 
^©MMtr^tiTM^. 
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$kfflW®& i &1tLT7nif7&tiim&Ms 2 izmznz iXTy 7s i 3 

1 )o 

m K ^ ? AftMtt^ 5 2 7° □ ^ ^ A * fc HURL ^jft^nt^ 

1 1 tjUffi-TS Wt^S 1 3 2 ). 

£©;* -^->J * Hi, #«j^Sffi* 1 1 fcckoTMStl, 5V X ^ K SB 2 

13- -;1 1 6 Art* 6 3fM©y D^^ A V^T©3 ;* > h llf Ltf ^^U-f 
10 ^ 2 1 CSSS^S Z 

.3.— S*#&#&2 2 £ 1 1 J; D , IBM § 7° U if 5 A #fll5£ 

3) . 

4) . 

^©X^y 7°S 1 3 4 (DWlfeltmis < t&^& tJ*COffi 0 T'35£ D -hfcSg 
09ilti* kfflU I Ml 2^rtiSfcBgf $ftfcf ifr® 

20 * 1 1 ^e>©MMT35^££T£ 0 ^ AfitfgMgS 5 2 a, 

25 D^7AtSMl5 2lt a — if k fcMJS U&a-if^S'J'lSi&jWSIS 5 3 - k 
©^@3M$EM§|S 5 4 ©&M©tBIIM£M1-§ n tic i 0 , a-lfk © 
UIM12 OlS^Dy^oS^StDtiTi&S^^nyif 4 0 - X ( I £ 
X^7) fit, gHaMMM 5 4 <D&m®<D5 "5 iL©K*7*P 
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- ^ £ ^ T & (XT77'3 1 3 4)„ 1-lfkCUIMl 2tSlJT 

£©Sl%, 7"a ^7 Aftlgfe^^ 5 4 fci, cx — if ^ 6 ©H^t^Vs, ;x- 
AiS»Sii5 4F , }(0^^t^SX | J7H«^t3. St # L & :/ a 

CCDAStLT. 3.-f^lT^57'ni/7A©II/) i l7t§i, SBif 
15 flt-ni 6AiJ, S^ri-lf fc5 HiiS ^7^©lEfl7C© n >T>y 

iUt, n.--tPfi|3§M$ 5 1 i±. fci£ffilM6 1 S^bT, ©S&#Sfif5fcl 1 
20 6 A C £ (7f^S13 6). 

a— ytt^f&sfigB 5 i a, a-fkfflu i m 1 2 tfftm^tztemmz ntc^W) 

25 4it5 (77^7'S13 7)„ 

^7 A©fiJffl§g|5£SIST ^< , 7^?^ ^-va >fpflJ&i"tf 'Wlg^lft^ 5 
li;g5 (Xry7°S 13 8). Z. n iz «t D ^l— tf Ift^MSE 5 1 K , a-lfk 
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c#jsb£n-ifMf«M«^ 5 3 - k (Dmntwm&mm s 4©;&«©5 

^J^Dy^ 4 0 -xtdM^Lfcff ^£SBtI£tafc^ >^x-^©ffiffld«fF 
io [2. 3. l. i] uiM©I*^n7^®il {uy^yv^ — ^ifi-^u if 

# CDM t -3 TgS 9J f 5 . 

^-CDyp^5>AA«SSU7i 1- "fcoMSS t&E'^'5 36^^i"Sii 'JXM*j| 

-r >^ ^t;Ajr£mm m^mm* i i * sBEM^au— a i 6 A©jL-iFit 

MM 5 1 ti&ll^ (Xt^7"S14 1)„ 

jL-if'lt fflft^SB sib, k ©mm* i i ^ egaff^MStf^ 

20 t, JX-lfWJtffgteM 5 3 - kOSIB-frfiMM 5 4©^®^©5^iBff 
5 2 fc 21 -5 (^fy^SHZ). 

si^tii, f©URL*iii/iT, n>f>yt--'n gt^D^icEi^ 

Ur^'S 143). 
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iSSEU--n 1 8 ]t, uy*ryvV — n 1 9 j&SU I M 1 2 #-^1^2 
5 § (X^y 14 5). 

«6f W 6 2 lz gB ff 3 Uf^SUfi). 

-fe^rL xawsawss 6 2 a, ihi^ts^uimi 2 tr^js l&u 1 m^ii 

5Z\*»#ftbTUIMl U1M12TH U I M & H & £ 3£ & & T 

15 U I MlB^S^fflViT^P ^7 ACDS-^ft^frfctl, - ©M-fb^J&#JT§ £ , 

MO -XiC##&tf 14 7). U I M 1 2 l±, SH^f^a^ 

«fc riS*7D y % 4 0 -X^*»^. fttjT, CCXf 77°S 1 4 7Ttt, 02 
20 40^f*;7"S13 4fc^liT*» 6 ft & % <D t Wl C K# 7 P *;?4 0 -Xj&*;fc 
ZbZtlZ* 024©7f^7'S 1 3 9 C^HTiaffiffSU—A 1 6 5 

y£ 4 0 -X£#£f @2 SfflXf 77"S 14 7Tlt - 

©1t?g£ J; 0 1$tSftfc**^oy ^ 4 0 - X t^P A**iWr S J; 5 b 
25 TfeiU. 

U I M 1 2 11, ^n^-5icit3i*^7T5t. ^Cg^itSiAiTi 
&£IHfiM-y--A 1 6©-fe^i73iMiIffllSB6 2 fcgff (^f 77°S 1 4 
8). ;i0«E££TMH:, 7°D^5 AW^&tfffrtoftfcX*:^ S> # 4 0 -X 
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£ £ ^ A, T u & „ 

E-flMti— /? 1 6 <D±*ra.7 mmMWifc 6 2 ^lOl^ITIiO^g^S 
:i-lMjtMM 5 111, U I M 1 2 \zm%^h J fz7°v¥7k.<D%ft<Dff*\&W; 

5 14 9). 

H©7^7^^— >3 ^^SttSt^ fcn A 1 7^T>f 

^—>3 >^"Bl^a— If'WSfeSA^ 5 1 Ur'^S 150). 

^07?T^"^3 >ff^£g«ofc-i--^M&M 5 IB, U I M 1 
2 fc7^x-Y^-~>3 >^£5I3 (Xr>y7"S 1 5 1 ) B 
10 UIM1 2Tlt ^fflTirf -f^-->a>i&iMiSft5fc, ya^7^S 

^#&Ai£&*:/n y # 4 o - x'zzifchfcmmik? y ifw "o" "1" t 

UIM12I1, JD^^AOTi'T-f ^—>3 >^7t5t, © b £ ^"1" 

15 tf 4 0 -X€#5tf £ t fef'MM^-A 1 6 A©a-1f'lttiB^ffl§ii 
5 1 Mff« Uf^S15 2). 

3--*?mm%&$im 5 1 a— *f k ©u iui 2 ^ & r^x-r ■^-^ a 

ii^SltSt. :x-^M']fM$f«l$ 5 3- k©|£lEM^$!lSi5 4©« 

20 k ©U I Ml 2 fci*^n«;J 4 0 - X Jd S -2, ^ ftfc :/ P if 7 A SfctJfc L & ^ 
-f >^f"3 7 ^iti*a*^Tl^. f l/T, r©MC, g£lc8£ jJW 

n So iLOia&s&flsasfftoft-sfc©* saw^a-y--;t 1 6ab, a.— if'tt^s^ 

M 5 1 (Dll'J C £t J; 0 h>T©U 1 Ml 2 ©K^D «;?40 

25 - 1 - 4 0 - 7 Efttft^fr feftT^S^ £5 J&> £ ft! JI f 5 d 

So 
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EMJU+f-A 1 6 Ate, ?D^7AC7?f^^->3 >#tg7 L/&^©iI 
ft] £ n > x > ^ # - A 1 9 f~ji£ C * -7 y 7° S 1 G 4 ) „ 
5 [2. 3. 1. 2] UIM©S*7'O^M?)ii (UMa^-A^y D if 7 

10 #:^lEMffi^~A 1 6 A fcgBlfiSnT^S. £*T\ £©0 2 G Jc tk T »J f£ M 

— -tfj^lBMHif-A 1 6 A ft 5f WIRofeSS'J * h Brlf © 7° 

>^£l^fcIB{fMW»S* 1 l^SMMlt-A 1 6 A©--x-lf ft 
15 5 1 £i£Stl5 Uf«;^S16 1). 

:i- U 8 ft Site » SB 5 1 a, a— if k (DmhUfm^ 1 1 ^6ffi«^*&S^JRS 
:i-1jWJfifiSM-3!$ 53 - k ©HlBftfitSiMSB 5 4 5 5 IB fa 

£55 2 Ufy^S 16 2). 

SnfcM«S:#Bgt-5. fit, ^iI«tyD^'7i.*ftMftSnT^5i 

25 ^©7"n ^5 A#MBg^{fcbTa-^k 00 U I M 1 2 tlSOti^gfeU I M 
ftW®0g#£^-5 (Xy-y7°S 1 6 3). 

^fl^-A'l 8 fct, iiltlC^^tS'/D^^^^U IM1 2-.©f f 
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2 tg4 Uff^S 16 4). 

gaff tit-A i 6 AcDt^rLrmmmw^ e 2 ta, 1 kouimi 

2fcaEWif#t^P^7AS£l5 Uf-^S 1 6 5 h 
U I M 1 2 It UIMfiiiit^&TU IMt-fi^lBStT^D, d CO U 

10 O V 9 4 0 - X K#£&tT 0 

^©iHftigi 2 5 ti^^n&fe© t y , 02 e fc^^xx^ y s 

1 6 6 - S 1 7 1 ft. SI 2 5 fc £ if % % 9- v 7 S 1 4 8 - S 1 5 3l:f)gbtU 
•5. 

[2. 3. 1. 3] UIM0l*^Py^©§i CiSH^ff^aU— □ Zf? 
1 6 A©M^7jHli4M6 2 ifizfutf? A©IBfB^TS £U I M 1 

2©u i M&mm&i&mhT^ZKk^tzm&tfmz r>?&° m^^Mmmcoo^ 

fT^n, u i m 1 2 icff #?A*n-5o g 2 7 j;i^tsh£&. giffi-y— ;i 1 s ^ s 
u i M&mm*m%-t%x^yy*s i 6 3£j;^s i 6 4 fc*a^-r «Sb^j5*^*o 

25 LT^5^Si^> g 2 6 fc^Tlf^t.l"J^^S D , g27CSIt5^ry7S 
181, 3182, S183-S18 9H 12 6 t*itS^f^7S 1 6 1, 
5162, S16 5- S171t«lT^§. 
[2. 3. 1. 4] UIM07 l J-|*7*P'7 7^«ii 
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U I M 1 2«7 l J-S*7*D-^4 0 - F 1 ^ © 7 P ^ 5 A 0 S@ £ fr "5 :!§ 
5 J.-lftt»i&#:SS7fe 1 1 UfcJ: Dff^^n >-^>^*-.A 1 9 Xfc 

£ ©IHI M£StfflSi^ fen 1 9XS, M^Stlfc^D^^A 

6 A©^^7»ffirM$PSG e 2 iciBfl-rs U7«;^s 1 9 

2 ). 

10 ^-lf^7 'J-l+^O^i; 4 0 — F 1 fc^T^gEfl * , freS'?Zmft$:ft Vi, 

■fe^a-yaftilfflSS 6 2 ft, 11CUIM12 tfLT, 7 D ifyA 

£ 13 fit "T 3 (7r^S19 3). H ©7°D £^ AM-SHbbT^ T & < , 
m^fch?£^T*mo X fc «t Vi„ UIMI 2 ft, C©yD^7AS7U"l*yn 
15 y ? 4 0 - F 1 

UiM121±, ^Di/^AOSfjA^^lutSi, ^-©^^3<-r«3A^7® 
«@3ffW®if-A 1 6 fc^ffTS (Xr^S 18 4). 

EMffffiU" — A 1 6 ©^--ifftMM 5 1 it, — If k©UIMl 2^6* 

20 v ^ 4 0 - f t^ji£:Lfc^«fcgaigsnfcEffiig[^af©ii^*Hifrs U7 

^S195). 

iioSgi^bSi. ^-ifiSfejfti 5 1 ft, 7'J-I*7*n^40-F 

lt=«#jAi:tLfeyn^?Afc^^T©7^?^^-~>3 >fS€U I M 1 2 f~ 
m% (7j-;7"S 19 6). 
25 UIMI 2ft, £©8?jj?K:«Et>T, 7 , D^7Al!)7fT^->3>&j|i5 

Lfcg^St7i'r^->'a $02 ft MU— A 1 6 CD i - If tit $ & 
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^--9-* 'ill MM 5 lfct, a.-1fk©U I Ml 2^e.7>?x>f ^-'>a 
L T , ^-If'WM^gSJ 5 IB, 1 lt)taT§i^7©B^yn>/ 

5 ^ a u * h t ltmltm»7« Ut^shs), 

[2. 3. 1. 5] ^UifyA<D3.—VFWm^m^^S3Mm 
(r o H T P3 2 9 £ # HS b TI2 ej-r -s „ 

ASwmM^Efi tit- a i 6 a©^.— ifitn^jfias 5 (X 

15 :i- if If St!** $5 1 tt> lMre$5/D^7A^U I M 1 2 

«, £r 4 0 - 1 — 4 0 - 7 ©li-f ftfrfr £» g£ fc Hd Bfe £ nt Vs5J|g#fcB, *O^D 
^ 9 A©i3M5cT^§ 3 >5 : >^-^-A 1 9t, a-lf j^r/P A©^IJB 
|1}£^mLTU5g©TOM«i£5 U7y?S 2 0 2 ). & £^ iWM^T 
$5^D A^M^nTfCU I M 1 2 ©|*^D 40-1-40-7© 

-A* 1 6 A<D3--ifmmfeMW> 5 1 tl5 2 0 3 ). 

25 u t m b m$t & s # 7° □ ^ ? a t 5 ft $g & gtj ^ b , 1 1 # l 

TiJftm©S®7"Dif 7 A U 3. bMMw^l 1CI5(Xt7^S 2 0 4). 
[2. 3. 1. 6] 7°P^5A©U I M®S*^D«; ^^SOgiJ^ 
*CUIM12 O # 4 0 - 1 ~ 4 0 - 7 ^ & 7° □ ^ 7 A £ II 1$ T -5 
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fr^ffl^fFSff 5 t t tdcfc "3 . SJCSMS^ 1 1 £ j£ -ft £ ft T ^ 

5 U I Ml 2 ©S* ^□yi?4O-l"-4O-7ro5 , 5 9JMi0^D^7A tf**ft 

i]iS£M^M«5M itf^MUfSt*— A* 1 6 A ©^-^'ItMttil 5 I C 
Sift 2 ft § Ur^S2 11). 
a— if'flfM$)sS 5 1 SJ^M^&Stt^tS t, U I M 1 2 fc$mfF «FM 
10 (X^y 2 12). 

UIM1211 ij!5£§f elM^M^ 7,7- y ?S 2 1 1 UT=L~^r 
fc <fc -d T #5£ $ ftfc y o ^ 7 A £ M *S 1- § y □ y £ j&* 6 iO 8$ b , i'j iM7I 

dftfc J; 0 ^-Ifif^iM^ 5 1 Kt> fciUfMM 6 1 ©SJfliTT^^-rs y □ 
15 i/7itlit§f$*llt, n >t>'>*wU 9 fciJMMfr? (X^y 
ys 2 1 4). 

^--iMt^MSE 5 1 a, 1 1 CM LT|i]i^T©g§7'D 

[2. 3. i. e. i] a+^a ^ ^ s <d7u#7 M,0wimmm^miw^m 

Btf 3^ b & «t 5 t S* ^ n y 4 0-1-4 0-7 ^ 6 © 7" o £f ;> A © MM S £ 

Kit t=s*-A' 1 6 AcommTy'uify ^0=L-^mmmmu 5 1 ^ zonmt 

yy'S 2 1 1 tkUX'ryJS, 2 1 2 ©Mfcft^LT, a — if fil IB t& jfe BIS 5 1 3$*iJ 
[2. 3. 1. 7] !L~lftft$gMg|5©M£^±T3±§£ 



WO 02/061572 



PCT/JP02/00699 



n >f>y?D/H^5«)S»l:j: 0 S fc-if Sdlf fl*-/t 1 6 

A ©it- If* £-^«KI?it5^a t'Efrfcn^. £ © a -if tffgMSE^ 
5 7#tV >3 >mmfiftt>n% t. a-lf'tif^M 5 i cis^nx^ 

s^o^/7A©uimi 2 -.©M^itsftfc t) , uimi2 csgsmn 

§ 7 a ^ 7 i> o Bfl Rfc j&*£ik $ ft -5 , tU5a*^4C§ 0 
EAT. 13 UtiLT, r©rL--y s 1f^fe^@|S5 1 ^ 

SI*. 3>^r>y-9--;t 1 9^fgffiWSit-ni 6 A©n-^1t$gMH$ 5 1 
KJL-if MMelSxV 7^^->'3>M ; £S£ Ur^S2 2 1). 

15 n >7->W-rt 1 9 ten-if^f&^xV 7^:f ^ ^->-a >t¥pJffl«gl 
5 Uf«^S 2 2 2). 
SHUT. ^-iffitfg&M 5 1 rL— Ifftiifcfafili 5 1 ©3pjffi#gih£ft& 

i©a-ifMMgf$7^ 7^7-^ ^-vh >m«i!im* 1 1 

f^S 2 2 3 ). 

[2. 3. i. ?. i ] a.-iftfiMi^T-v 7^7-^ ^-->3 >*mmmm 

^ 7^7^-^ 3 >M£M#«* 1 1 tCfiS (XT7^S 2 2 3 ) c 
[2. 3. 1. 8] U I MC**^Dyir|:#»SHT^§^Di/7AC?Jffl* 



WO 02/061572 



PCT/JP02/00699 



SSttUIMl 2©3*^D7? 4 0 - 1 - 4 0 - 7 h 5 V* fc£ 7 'J - 7* a y 

7^^->- 3 >sasfc^nTii 3 2 s#ssbTUii9-rs. 
5 i i s^ssi t*&-3 fcs^n >f>yyo;t'f ^ e> 

fctist, IWft&ofcl$yn^ (7 U -ft^7*P y 7 fe^tO fcte 

10 -9- — A' 6 5 j&tn— jf** 6 ©Ji$RfcSt?^TS^y □ 7?T^ 7^t^ a > 

0 3 2 ^x-f 7^r^^V3 >4Q ! S®i'-<?- >7£^T» 

15 ^.-if'tf 5 1 t±, ^l*^n7^T^?f^"ya>I*^f 

$[3 t, U IM1 2 fcx-f ^ — ->H >-ft^&3!£ (^ff 7° S 2 3 2 ) 6 

cntiDUIM12fi, S^7*d v?7-f7?f^->3 ^M^fcMJST 
-Sii^T^D »/ ^T^i'T-f ^ — S' 3 >M tl, UIM1 2 ^#7*o y 

20 t5 (7f»;^S 2 3 3 ). 

8liT, ^-ifMMBP 5 1 a-ft-t'^t-/U 5CSLTUIM 
1 2 ©ffi^7'P^7©flJJS^Sih$nfcg^S*7 > D^^x>i' 77t^^->'3 
>I7IfttlTljBt5 (7^y7°S 2 3 4 )o 

$ Btra-^MMgEs a ta, n:^Lti*^o 7 ^ (7U 

[2 . 4] m2nmmmo)pjm 



WO 02/061572 



PCT/JP02/00699 



51 

s & , le 4t *g m # - / 1 fc & v i r S3 it l t v > s 7° d ^ 5 a © ft \ b / ^ ft e ft & 

<t tfftj m , 9E ff WIS M id ft 5 7° D if v A © IB if *5 £ it ft -ft /^RSftfli & i CJC 

13] |iliSM<£>MM 
[3. 1 ] f£ 1«M 

ffMlt-A£«BH7, #M«fr7 J: 7 fruits £ £#-51^*5. 
10 C©a^rfctt> #UIMt»*S*lTls5?P^7A^ #7°D7*^A©t#|fi 

[3 . 2'} m2&mm 

15 hir - h >7i-f SM^^LTtailSm.lBig^f ££5 icSltS z: t 

[ 3 . 3] 13 »M 

J^±©iiEiK^ViTH, ffiti tva^iPt l/TU I M © £ O H T © ^ g£ 
LfcJ&f, £#© I H^^U \Z^UTmmT% Z. t feW?^,, 



WO 02/061572 



52 



PCT/JP02/00699 



Iff f B n > x > y It - / 1 ^ 5 ft 1 3 y O if ^ A £ § ft L , Hit 1 5 3 > ^ > y -y- - ; 1 # 
^s&ffnl^nfc^ >^>y ij--;ti? fc ISO , fufBn >f>yt-/W e> 

a& i b & n & *jg * § ^ l t m t b e m m a u- - a ^ & s it s n y □ ^ ^ a & tu m 
mnm\zmw.h, ^cjsct, MfBiBMt~M£n&:7°n^5A£iifTT§ 
is mmmt 

fib. 

25 $ ^ 2 <om^m^m ^-r^u, itttBsait^sit-Aic^t 



WO 02/061572 



PCT/JP02/00699 



53 



it i~ «fc x# 6 tifc^n if v A & Iff IBM^e ^ 1 lit Mit 
§ MM l CMo^o if 7 A S3 If <^fA. 

nsx-^siaift-rs ^ t *#mt-rsif^® i ttB®©7°Pif ^AgBftv^^ 



§ flU IB IB tt ^ n - }], fc j@£ m t , 



iS^rt-^fciBISSftTii D , HLffB T 2^>r a >f£,Kfc =fc^ Tfr;^ ^ <§t^ 



15 



WO 02/061572 



PCT/JP02/00699 



54 

9. M!EMM*-;m, fl&®3£g^S©g:*fc«fc D^-f 77x-Y > 

m^^mm^n.^ v ^ - )v \z mm b , 

5 |S|Q'li ; E^a.-;VfcH3^^tlT^ D, M IB x 7 7 "r 4 ^- ~> 2 >fi?7* t J: ^5 T 

« 1 fc fBife © 7° a 7* a IS ff -> 7; t- A . 

13. itflH^SFfl£SS*f4» #Hlj!«?iJJii bfcffi^fcfrSfcfccas 1 CD® ft SB 

w tstBti^ ^ a -jv <d umm \t, mmmm^ v * - fctag s nt 7° n 7* 9 a 



WO 02/061572 



55 



PCT/JP02/00699 



tfj imm&mm rc m % %> vuxmm £ n fc is it t v =l -)v t , 

ttffB!E'ti;^:x-;WS, 
10 fiBBMM*&^ LT'|f«^jiU Mffir ?g^1wBB@BMffi1t-/^ 6 3Hf 

iH'tti; fc ibh $ n & ^ d if 5 a * s^fr 1- 5 M^fB t 

u ^^ASHfSv^xAo 

£ 12 it -t 5 u m m ft w m m m m % a« l , t& ta^ ?j la fit £ is §b g t ib m zntc 

S -i > * x » * fc ± o T # 3£ $ ft fc y D ^ A © It f B ff B m -T- 5? a. - ; 1/ ^ © |B f3 
m^^nrct^, S^7°D ^ 5 A^lulBfB^t-^^-JKcSB^^S £ i: fc, 



WO 02/061572 



PCT/JP02/00699 



56 

m 7° □ if 7 A £ % # y 9 x - 9 % m sBM ff MffilBfl^ S Iff SB H SB 
MMfB'tt^KlMSitS -£&!fr${i:l£ltM 1 6 t^|Bii©7 0 n if y A SB If 



£ 1 3 m -r % -f □ if v a m n t b it m & * n l , m i s s m m it s t s m as s ?t « ^ a s 

ft M *B IB IS SIS IB 'It StlfciPO^f-^ti^TSgSnfc^Di'^A CDfy b2 
SB It ^ y © glffi^M 3 tlfc £ £ , S ^ 7 = O ^ 7 A £ MfB "7° □ ^ =t A if 

M 1 6 £sEic©^P^7AlB4I~>X:rA 0 

19. mm^m^^t, ^-a-uxM?^siit5?iE&af l, 

t&mtr&m^m. i 7 tiaa©^ ^ ass^t^a. 

20 2 0. ftoBM#;mM, #©a#SB£fflffl LfcS#£fr5fc»©!& l ©Mil 

tuf3fB'i;^vrL-Jk©MMl^ MIBtBltt^^-^fcfaii^nfc^D if ^A 
25 4tgi©7°D^5Aiety^TA. 

2 1. MBit ^fc®^"©^ 1 ©ff«fc±£BiWfci:, 7"ai/5AiHW^^^r^n 



WO 02/061572 



PCT/JP02/00699 



57 

IE n y -r y y -y— ;t ^ 6 g ft -r § ^ g £ , 

A t m - © y° a if 5 A £ & 52 ^ © 7 h* * It IE m 13 y n ^ y A 'SIS teifft® tc & 
i2tlT^5S^l:|yDi'7Ai&Hf©7 F ^7.Wfg©BffWB7°n ^5 A'f»^ 

tuiE 13^ ^ ^ - ;i/ iz mm vsmr it h § %m m gate* v ^-jvizm^^m^n 

15 T^&V^D^A t|^-07"Di/5AifcH^O7 H l- * flt SB # M IB D £f ^ 

-1* > * ^- * fc J: o £ ft 5 7° D ^ 7 A £ bu SB 7 n ^ 7 A MMSG £ *JJ ffl 

20 LTMLT^fBfBfii^zL-.^TKlM L, ^*-T >^x"^^MfBH@3{I 

2 3. f3^t^rL-;i,^F i ajis§utt^^$nrc#ffi/-*^*^6yD^^A©ifi 
Wiami ©M^fc£DMMI*T&3:7°u^A&ii£^t-r-i>|g 1 ©Bf^-ft 



WO 02/061572 



PCT/JP02/00699 



58 

5 It-At^gtSfftt 

glib, ^ 1ft £ ft fc D 7°n ^5 Ao£-SHb£frVi, :©atfti> 

mvihr-m^izm^rm^ai/^A^mmmm^i-mmh, m^izmux, mm 

15 

2 5. ffig3 Kigali, ^O^5A££frTS&fc0^3ifc0lEte:/Dy2r£, #fH 

20 m-i xmm^&^y ? ^©«#&#.§fn^ MiaMM^^UT^-r i 



WO 02/061572 



PCT/JP02/00699 



59 

m b y n ^ 7 a © mmyuT" % z> m m n > ? > y * - n**^ & m a n & n > ? 

>iy+)--/tT|i5l^}'> M £ £ jf L t'&Wjfcm^ \Z fom $> S V> « 

tlfcfBIt^ i?^ -)l Iz Sir IB 7° □ ^ 7 A £ SHf f § M £ 

& huts its^atts^D^^AiEiJs. 

5 

tij SB a > r- > 5> U— A^fUB BB^f £ L , tu IB fBlt^E v n. - iz 0 * © 
10 tlffB^ y ^ y y V~ /^tfmiwMMT Sb z 7 o if 9 & % mmm 1 ©»g J; 0 
flfTIBrr >^>^-y--A^iulfim l ©N&^ii£ Zzm^ikZUfcJu if? A£^ 

s&jr#u&ss 2 ©nt ^m\z£ t> et^tT^Mt. 
mu^ y^yyv-nmnuw. 1 (Dm^miz^zmrnktm 2 otitis 
15 * k y n ^ =5 a § le -n m iif-A t- m -r § m @ t , 

BufB|BltM^-A^\ IS AH 3 >f>!V*"A* £ BM £ fife 4? y- A fc*f 

l, imam 2 <Dm^i£&&&m<DWMizmTw^ik&mLT, mmm 1 vm^w 

iZ <fc § Pf^-ffc © ^ £ life 7 P ^ 5 A & M 1 if @ t > 
lueBBBWSaU— BufB@BfiM£ig ft t fcMM* M a S ^ iiS 

%Mm-rzz\t*wm£T&y'ui/7Ammjjm a 

25 yn^:7A©lBflM£E{B-r5M£, 

ififaMMlJ— /^ffifegBMM^Ml- ffiff*f&T? £> 5 7n ^ 9 A#^ 
6bVtpS-£Wtzi>T>y9- — rt }z£ -o xm §^HT^5 7°o 2? 5 AT&5 



WO 02/061572 



60 



PCT/JP02/00699 



Wi IB ffi ffi M & T * § 7' P tf =7 A # ^ 8& iff pT $ n 3 > f > V ^ " / 1 £ ± ■=» T ig 

t ft m & § n tt^^ $ n fc gets 3. - r t irt « t 

5 

to ab se is w a - / 1 so*, iff ffi # n w m * <o -f u # ? a <d u m m ^ £ g & £ , 

10 CBB^arSiiSt 

3 0. BHM3fc£H#©Sgl ©li£^Hfc±5liff-5f'ffc£, 7°a ^ Aldli^^ *i 

mfi2P >-=r >ytf — ;t;&* 6§i$n&^n ifyA^mmm 2 ©it-^-Mt <fc5»& 
fcJ; DMtt£tifcytr^5A££jJJcL, ft ^Ji * fc ^ ^ $ n 15 

16 ^ =l -jv tzmmt siit 
20 £IB« mis— > Hzi-^ tiffst^^o i?? a = 

m ts^T & $ ^ p ^ ^ a nfi^ © fF"5i $ n & n > ? > y u— n tr ct r mm s 

K F*J H * § Vi liSi $ tltz m& * v a. ~)V$KT iz f § M t 



WO 02/061572 



61 



PCT/JP02/00699 



£BBff MU— /^©a =l-9 \z%fttn£%7u if y 
3 2 . MIBiEtl^y zz.-jl/fcftfc's T^d ify AtfcSf©7 F l^M£ieH; 

3 3 . ft&*z?n.-)Vtftemmz^umi&isnit®Wiftffimfr s 7n y ^ a©sb 

Hi, 

a it- ;\* mt & it a t 

20 

3 4 . ^m^tlf^fu if y A£M#:S*£^LTMcDlS{f Mlf-/t^ £ 
UifyAo 



WO 02/061572 PCT/JP02/00699 

62 

mm a >x > y & ti § ntz y o t* 7 a s st fB?£ 2 ©Bt#ii 

Kit) Mft^fc^PT^A^Mb, ^»i#;^*t|^)i^fca^^$n/cf2 

£@B £ ^3U— A o n > If a. - 7 t SsfT 2 * £ 7° a 7* 9 A „ 

10 3 6. ffitg ; Eva.-;i'^^iSS§VittS^Snfc^®J#:*^^S^ , D^7A©@3 

Jb § 7° a if 5 A tb f? -S nfc n > x > V V - .A fc «fc ^ T H# S 

ftuiBJKM3*&T?&£ t°p 7*7 A^Mfr-WSnfcn >f >7t-^Cj:oTl 
15 ftSnT^5^Di^7AT»5S^i: 4 ^ 7' P 7* 7 A £ M U T tu IB© «7n 

liffit-A©3 > e^.-^fc*ff $ii^7°P 7*7 A c 

3 7 . milBffBm^: i?^L-;i/fr-^fc^T7'D 7*5 itfdHffly F U J* Hf fi £ 13 16 

20 ^jtefBHT^M 

OTflB^®^^*©7°P7*7A©@B{tg3R^gt7fc tf, M!BM¥i££M L 
T, S?^$nfc7°P7*7A£MU IfflBIBttt^^-JVfcffi^i-rSii^t 

25 3 8. mm^y^-)i'fi i foM&%^i$mM^ftfc&mfcmmfr s^dt^a^ib 



WO 02/061572 



PCT/JP02/00699 



63 

£ n > x > y V- A © n > tf ^ — ^ fc^fr $ it- § 7° n if 7 a „ 



3 9. ®^ftSn&^n^7AS#ft#^*S^LT#^©BH#^a-lJ--A*^& 

io 

15 D^7A. 



WO 02/061572 



PCT/JP02/00699 




WO 02/061572 



PCT/JP02/00699 




21 



22. 



U 

UIM^— =l— 

1. OOi&i 

2. AA^L^yh 

3. x x $|ff 

4. ? ?ec+mt 



u 




CD © CD 
CD CD CD 
CD CD CD 
CD CD CD 



23 



WO 02/061572 



PCT/JP02/00699 



3/32 



11 



12 



UIM 



^35 




UIM 




I / FSB 


■4 ] 


^36 




BP 


-4 1 


AtfcizM 






WO 02/061572 



PCT/JP02/00699 



4/32 




WO 02/061572 



PCT/JP02/00699 



5/32 



4 

h 





p 

Wt A3 

5 


□ft 




^^r^ps^ 



CO 



Ih 



1* 



jjiin 



ES 

CP 

+ 

in 
□ 




<3 

h 



-m 

m 

V 

ih 









m 






m 


m 


/7\ 
1 


1 


-< 

V 


■*< ■ 

V 


ih 


ih 











WO 02/061572 



PCT/JP02/00699 



6/32 



t- cm co -3- to oo 

CO CO CO CO CO CO 




WO 02/061572 



PCT/JP02/00699 



7/32 



4. £^-SF£lfA. 



-r 



u 



D4 



D1 CDII^S 



WO 02/061572 



PCT/JP02/00699 



8/32 



n 



CM 



CM 



V 



4- 



CO 



m 

m 

v 
IS 



h 

-m 

7\ 

m 

I 

< 
v 
ih 



S 



1* 












m 


m 








1 

-< 


V 


\ 


ih 


Ih 


C\ 




N 





CM CO 
CM CM 
CO (/) 



WO 02/061572 



PCT/JP02/00699 



9/32 



I 

lh 

n 



m 

■< 

Y 
V 

i'h 



if) 



CO 



h 

m 
/7\ 
I 

V 

.lh 

V 

rh 



: S 



m 
,?\ 
I 

lh 



CM CO 

co co 
CO U) 



WO 02/061572 



PCT/JP02/00699 



10/32 



IS 

n 



CO CO 



-tf LO 

CO CO 



LO 

to 



1* 



ih 
□ 



1 



h 

m 
I 

V 

Ih 
r- 

V 

fh 



m 
i 



ih 



1* 



{in 

i 

an] 

ih 
□ 



In 



am 



□ 



CO 

CO CO 



CM CO 

LO LO 

CO CO 



WO 02/061572 



PCT/JP02/00699 



11/32 



ih 
n 



CD CD 

uy in 



CO 

W CO 



m 

m 

X 
v 
IK 

v 

rh 



■ 

RK 

A 
m 
,7\ 
•I 

*<r 

"V 

Ih 



m 



am 

<s 
in 

□ 



V 



m 








7\ 




h 




m 


UK 










=53 




< 
-v 


<S 


-in 




in 




Ih 










□ 


□ 














) 3 




) 



r- CM 
CD CD 
CO CO 



t- CM 



WO 02/061572 



PCT/JP02/00699 



12/32 



th 

n 



CM 



P 



l|llD 



m 



CO 

co 



A 
Ih 

□ 



i 



CO 
CO 



CT> 
CO 



CD 
CD 

CO 



Iff 

K- 



Ih 
□ 







m 








m 










- 1 ih 






i 






5*h 



ft 



0) 

£ 
P 
"3 
O 

£ 

P 







h 






JH 


P 


P 


P 


o 


O 


O 




h- 


E— 


00 


lO 




CD 


CD 


o> 


co 


CO 


CO 



g yiD 

l[ ) ih 
3 □ 



IjND 



ft 
m 


ft 

mm 






m 


m 








—J, 


i 






5 



ft 
m 

m 



CM 
CO 
00 



CO 

oo 
CO 



CM 
CD 
CO 



CO 



to 

CD 
CO 



00 
CD 
CO 



WO 02/061572 



PCT/JP02/00699 



13/32 



n 



CO 



ru 



IK 

m 



CM 

O O 



CO CO 



(O 



4* 

m 

1IN0 

in 
□ 



G 
P 

I ^ 



UK 

HJID 

[en 

< 
in 

o 



T— 

CO 



JO 3 
»^ 

ID"' 



CM 
CO 



CO 
CO 



WO 02/061572 



PCT/JP02/00699 



14/32 



n 



CM 



-3- 

CN 

CD 



in 

□ 



3 



A 
|5> 

I§n 

ten 

in 
□ 



CM 
CM 



CO 



CO 
CM 



C/) 



WO 02/061572 



PCT/JP02/00699 



15/32 



15 



oo$m 

UIM>-zl— ^gf| 
UIM^v^VP— K 



5. 5£J«#-SFflNSg 



UIM>-j.— A%bW^L 




i U 



WO 02/061572 



PCT/JP02/00699 



16/32 




4. £JW#-SF£«|A, 



5. ^#-sFit 



i 

2. SF 




1. UIM*~a— frbali 



2. ^ 



U 

1. ootfci 

2. AA^by^F 

3. x x$m 

4. ? ?EC+M'h 



D23 



D24 



WO 02/061572 



PCT/JP02/00699 



17/32 



17 



(2.000 R) 



2. t$temmL*i*E 

(5,OO0R) 



3. smmmoAm) 

(7,000 R) 



1. UIM^-i— ^biilR 



2. ^<D«;££& 




V 


> 




r 1 u 


\ 






1. OOWkiM 




2. AA^fT 


3. x x ^Uv^h 




4.? ?EC+M> 





i u 

•S^JS fji 1234567 
■ Bb SES-^ : | * * * * I 



D31 



D32 



D33 



D34 



i U 

AAglfr 



■mmSlfi^ii 123456 
12.6535R 



987-654-321 



WO 02/061572 



PCT/JP02/00699 



18/32 



m 18 

\ UIM^-n-A 

UIM^-zl— 



1. OQ$m 



2. AA^vyh 

3. x x 

4. ? 7EC1MI- 



D41 



U 

OOtfeii-^- 
2. SF 

4. 77 0| J^-ya^gH 



D42 



U 



D43 



WO 02/061572 



PCT/JP02/00699 



19/32 



19 



u 



l.OO&JI 



2. AA^bv'yh 

3. -x x $gfr 

4. ? ?EC1Mh 



u 

2. SF 

5. b-ji^t-rtSi^ 



u 



2000^1 fl1HA\b 



D51 



D52 



D53 




D54 



WO 02/061572 



PCT/JP02/00699 



20/32 



20 



u 

2000^1 £j 1 Hfrb 

2000^6 m 30 s ^-e^ga 



D61 



D62 



WO 02/061572 



PCT/JP02/00699 



21/32 




WO 02/061572 



PCT/JP02/00699 



22/32 




WO 02/061572 



PCT/JP02/00699 



23/32 




CO 
CM 



< 

CD' 





WO 02/061572 



PCT/JP02/00699 



24/32 



Ih 
n 



C\l 



CM 



m 

m 
I 

"< 

Y 
Ih 

TV 



t 
m 
I 

"< 

Y 
lh 



CM 
CO 



CO 



CO 







i 




n 




"1 ! 


W 


^ 1 





to 

CO 
CO 



m £ 



m ( 



CO WF' 

— 



CO 

CO 



CO 
CO 



CO 



CD 

CO 



CO 



WO 02/061572 



PCT/JP02/00699 



25/32 



CM 



< 

CD 



IK 
n 



CM 

ft 



' CO 



m 

l[IID 



■5 
ft 



llllD 



5? 
m 

y + 

CO ^ 

□ 



CD 
CO 



K 00 

CO 



00 



CO 



CO 





.IH 1 


m 




A 




m 


m 






1 

'< 




V 


V 


Ih 


ih 




<\ 


IV 


(\ 



o 
CO 



00 



CO 





CO 




CO 




V 






























m 


m 


-fcK 




/A 




m 




! 


1 


[ 


'V 








V 


V 


m 




ih 


Ih 


m 


CM 
LO 














CO 



WO 02/061572 



PCT/JP02/00699 



26/32 



CD 
CM 



< 

CD 



fh 

n 



CO 



ft 



"3" 



CO 



'Ma? 



— IK 

m 

< 

LO V 

to ^ 



/-iv-r- 



00 
CD 

CO 



LO ^ ft 

□ 



CM 
CD 



CO 



CO 



CO 
CO 



CO 



>- 
CO 



£ m 
co ,^ 



CO 
CD 

CO 



Y 



m 

I , 
V 
v 
lh 



to- 



o 



3 



WO 02/061572 



PCT/JP02/00699 



27/32 



!h 

n 



CM 



CM 



< 
CD 



to 



m 

,7\ 
\ 

'< 

Y 

IS 

®^ 

CO ?i 

n 



HMD 

m 

v 
IS 

□ 
n 



CO 



00 
CO 



G5 

co 



CO 



WO 02/061572 



PCT/JP02/00699 



28/32 



00 
CM 




CO 





V 


am 


45- 






m 


m 




,7\ 


J 


1 

_ '<r " 


V 


V 




lh 











WO 02/061572 



PCT/JP02/00699 



29/32 



CO 




WO 02/061572 



PCT/JP02/00699 



30/32 











IK 








n 






WO 02/061572 



PCT/JP02/00699 



31/32 



P 
lh 

n 



CM 



CO 



1* 

m 

A 
m 

i 

< 

Y 

lh 

Y 
i"h 
IS 



IIIID 

m 
'< 

Y 
lh 

Y 
lh 

m 



p' 



< 



> 



CM 
CO 



"m" 

I 

ih^ 
l\ 

Y 
fh 
tnj r 



CO 
CM 



iff 



WO 02/061572 



PCT/JP02/00699 



32/32 



CM 
CO 




1 








1 









"Y 

ih 

Y 



rstrs 



CO 
CO 
' CM 
if) 



INTERNATIONAL SEARCH REPORT 



International application No. 

PCT/JP02/00699 



A. CLASSIFICATION OF SUBJECT MATTER 
Int. CI 7 G06F9/06, G06F9/445 



According to International Patent Classification (IPC) ot to both national classification and IPC 
B. FIELDS SEARCHED 

Minimum documentation searched (classification system followed by classification symbols) 
Int. CI 7 G06F9/06, G06F9/445 



Documentation searched other than minimum documentation to the extent that such documents are included in the fields searched 

Jitsuyo Shinan Koho 1926-1996 Jitsuyo Shinan Toroku Koho 1996-2002 

Kokai Jitsuyo Shinan Koho 1971-2002 Toroku Jitsuyo Shinan Koho 1994-2002 

Electronic data base consulted during the international search (name of data base and, where practicable, search terms used) 



C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category* 



Citation of document, with indication, where appropriate, of the relevant passages 

JP 2001-28786 A (Sanyo Electric Co., Ltd.), 

30 January, 2001 (30.01.01), 

Full text; Figs. 1 to 13 
(Family: none) 



JP 2000-293584 A (Chugoku Nihon Denki Software 

Kabushiki Kaisha) , 

20 October, 2000 (20.10.00), 

Full text; Figs. 1 to 6 

(Family: none) 

JP 10-78S67 A (Hitachi, Ltd.), 
24 March, 1998 (24.03.98), 
Full test; Figs. 1 to 19 
(Family: none) 



Relevant to claim No. 



1, 3-20,22, 
24-26,28,29, 
31, 36, 37,39 
2,21, 23, 27, 
30, 32-35, 38 

1,3-20,22, 
24-26,28,29, 
31, 36, 37, 39 



4-7, 11, 12 



[~x~| Further documents are listed in the continuation of Box C. r— j See patent family annex. 



* Special categories of ciied documents: 

"A" document defining the general state of the ait which is not 

considered to be of particular relevance 
"E" earlier document but published on or after the international filing 

date 

"L" document which may throw doubts on priority claim(s) or which is 
cited to establish the publication date of another citation or other 
special reason (as specified) 

"O" document referring loan oral disclosure, use, exhibition or other 

: 'P" document published prior to the international filing date but later 
than the priority date claimed 



"T" later document published after the international filing date or 
priority date and not in conflict wiih the application but cited to 
understand the principle or theory underlying the jnvsniion 

"X" document of particular relevance; the claimed invention cannot be 
considered novel or cannot be considered to involve an inventive 
step when the document is taken alone 

"Y" document of particular relevance: the claimed invention cannot be 
considered to involve an inventive step when the document is 
combined with one or more other such documents, such 
combination being obvious to a person skilled in the art 

"&" document member of (he same patent family 



Dale of the actual completion of the international seaTch 
08 May, 2002 (08.05.02) 


Date of mailing of the international search Teport 
21 May, 2002 (21.05.02) 


Name and mailing address of the ISA/ 

Japanese Patent Office 

Facsimile No. 


Authorized officer 
Telephone No. 



Form PCT/ISA/210 (second sheet) (July 1998) 



INTERNATIONAL SEARCH REPORT 



International application No. 

PCT/JP02/00699 



C (Continuation). DOCUMENTS CONSIDERED TO BE RELEVANT 


Category* 


Citation of document, with indication, where appropriate, of the relevant passages 


Relevant to claim No. 


Y 


JP 6-195217 A (Nippon Telegraph And Telephone 
Corp. ) , 

15 July, 1994 {15.07.94) , 
Full text; Fig. 1 
(Family: none) 


8, 9,25 



Form PCT/1S A/210 (continuation of second sheet) (July 1998) 



PCT/JP0 2/00699 



a. mmm-t^m^m mmm&M (ipo ) 

Int. C 1 7 G06F9/06, G06F9/445 



% m^w^m (ipc) ) 

Int. CI 7 G06F9/06, G06F9/445 



ft^fmffl&m 1 9 2 6^- 1 9 9 6¥ 

B ^ffl^§3^fT^<&$ft 1971^-2002^ 

p ^mMmmm^seim. 1996^-2002^ 

0 >£BS«3SIE0i&43f3l 1 9 94^200 2f 



c. 



Y 



A 



JP 2 0 01-28786 A (H^ffl 
2001. 01. 30, £X f 1-13 



JP 2000-293584 A 
5^*±) 2 0 0 0. 1 0: 2 0, &X,. \ 

u 



j 1 — 6 ta (77? y— ft 



1, 3-20, 22, 
24-26, 28, 29, 
31, 36,37, 39 

2, 21, 23, 27, 

30, 32-35, 38 

1,3-20,22, 
24-26, 28, 29, 

31, 36, 37, 39 



•fc o Til£tfe!>S)fe v> t %x. HivZ t, CD 



0 8. 0 5. 0 2 



0^H#ffJf (ISA/IP) 
F-^-l 0 0-8 9 1 5 

!HTg4#3-S§- 



5B 



9 3 6 6 



0 3-3581-1101 



3 5 4 6 



#SPCT/ISA/2 10 (12^) (1 9 9 8^7^) 



miasms pct/jpo2/oo6 9 9 



c <M%) ■ 












Y 


jp io-78867 a m&£*kn&Mfm) 

1998. 03. 2 4, £X 11-198 (7rO^U 


4-7, 11, 12 


y 


JP 6-195217 A (0»#mis«^;^±) 

1 9 9 4. 0 7. 1 5, <feX mim (77^-4U 


8, 9, 25 



MPCT/ISA/2 10 (£f 2^-t>c9^£) (1 9 9 8^7i3) 



(12) INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 



(19) World Intellectual Property Organization 

International Bureau 

(43) International Publication Date 
10 October 2002 (10.10.2002) 




PCT 



(10) International Publication Number 

WO 02/080449 Al 



(51) International Patent Classification 7 : 

H04Q 7/3 H 



H04L 9/08, 



(21) International Application Number: PCT/US02/09835 



(22) International Filing Date: 28 March 2002 (28.03.2002) 



(25) Filing Language: 

(26) Publication Language: 



English 



English 



(30) Priority Data: 

60/279.970 
09/933,972 



28 March 2001 (28.03.2001 ) US 
20 August 2001 (20.08.2001 ) US 



(71) Applicant: QUALCOMM INCORPORATED LUS/USJ; 
5775 Morhousc Drive, San Diego, CA 92121 -1714 (US). 

(72) Inventors: HAWKES, Philip; 2/6-8 B elm ore Street, Bur- 
wood, NSW 2134 (All). ROSE, Gregory, G.; 6 Kingston 
Avenue, Mortlalce. NSW 2137 (All). HSU, Raymond, 
T.: 17775 Pennacook Court, San Diego, CA 92127 (US). 
REZAIIFAR, Ramin; 10896 Caminito Arcada, San 
Diego, CA 92131 (US'). 



(74) Agents: WADSWORTH, Philip, R. et al.; Qualcomm In- 
corporated, 5775 Morehouse Drive, San Diego, CA 921 21 - 
1714 (US). 

(81) Designated States (national): AH, AC, Al, AM, AT, AU, 

AZ, BA, BB, BG, BR, BY, BZ, CA, CH, CN, CO, CR, CU, 
CZ, DE, DK, DM, DZ, EC, EE, ES, FI, GB, GD, GE, Gil, 
GM, IIR, IIU, ID, IL, IN, IS, JP, KE, KG, KR KR, KZ, IX, 
LK, T.R, LS, LT, TIL LV MA, MD, MG, MK, MN, MW, 
MX, MZ, NO, NZ, OM, PH, PL, PT, RO, RU, SD, Sli, SG, 
SI, SK, SL, TJ, TM, TN, TR, TT, TZ, UA, UG, UZ, VN, 
YU, ZA, ZM, ZW. 

(84) Designated States (regional): ARIPO patent (GH, GM, 
KE, LS, MW, MZ, SD, SL, SZ, TZ, UG, ZM, ZW), 
Eurasian patent (AM, AZ, BY KG, KZ, MD, RU, TJ, TM), 
Kuropean palenL (AT, BK, CH, CY, DK, DK, HS, HI, H'R, 
GB, GR, Hi, IT, LU, MC, NL, PT, Sli, TR), OAPI patent 
(BE BJ, CF, CG, CI, CM, GA, GN, GQ, GW, ML, MR. 
NE, SN, TD. TG). 

Published: 

with international search report 

For two-letter codes and otlier abbreviations, refer to the "(guid- 
ance Notes on Codes and Abbreviations" appearing at the begin- 
ning of each regular issue of the PCT Gazette. 



(54) Title: METHOD AND APPARATUS FOR SECURITY IN A DATA PROCESSING SYSTEM 



ON 

o 

00 

o 

o 
O 



RECEIVE 
CIRCUITRY 



ENCRYPTED; 
BAK 
SK 

RK N 



ENCRYPTED 



| SUMU^ 


, SUPU 


UIM 




ME 


MEM '' 
306 




(57) Abstract: Method and apparatus for secure transmissions. Each user is provided a registration key. A long-time updated 
broadcast key is encrypted using the registration key and provided periodically to a user. A short-time updated key is encrypted 
using the broadcast key and provided periodically to a nser. Broadcasts are then encrypted using the short-time key, wherein the user 
decrypts the broadcast message using the short-lime key. 



WO 02/080449 



1 



PCT/US02/09835 



METHOD AND APPARATUS FOR SECURITY IN A DATA 
PROCESSING SYSTEM 

BACKGROUND 

Claim of Priority under 35 U.S.C. §120 

[1001] The present Application for Patent claims priority of U.S. Provisional 
Application No. 60/279,970, filed March 28,2001, assigned to the assignee 
hereof and hereby expressly incorporated by reference herein. 

Reference to Co-Pending Applications for Patent 

[1002] The present invention is related to the following Applications for 

Patent in the U.S. Patent & Trademark Office: 

"METHOD AND APPARATUS FOR OVERHEAD MESSAGING IN A 
WIRELESS COMMUNICATION SYSTEM" by Nikolai Leung, having ( 
Attorney Docket No. 01 0439, filed concurrently herewith and assigned 
to the assignee hereof, and which is expressly incorporated by 
reference herein; 

"METHOD AND APPARATUS FOR OUT-OF-BAND TRANSMISSION OF 
BROADCAST SERVICE OPTION IN A WIRELESS COMMUNICATION 
SYSTEM" by Nikolai Leung, having Attorney Docket No. 010437, filed 
concurrently herewith and assigned to the assignee hereof, and which 
is expressly incorporated by reference herein; 

"METHOD AND APPARATUS FOR BROADCAST SIGNALING IN A 
WIRELESS COMMUNICATION SYSTEM" by Nikolai Leung, having 
Attorney Docket No. 010438, filed concurrently herewith and assigned 
to the assignee hereof, and which is expressly incorporated by 
reference herein; 

"METHOD AND APPARATUS FOR TRANSMISSION FRAMING IN A 
WIRELESS COMMUNICATION SYSTEM" by Raymond Hsu, having 
Attorney Docket No. 01 0498, filed concurrently herewith and assigned 
to the assignee hereof, and which is expressly incorporated by 
reference herein; 
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"METHOD AND APPARATUS FOR DATA TRANSPORT IN A WIRELESS 
COMMUNICATION SYSTEM" by Raymond Hsu, having Attorney 
Docket No. 010499, filed concurrently herewith and assigned to the 
assignee hereof, and which is expressly incorporated by reference 
herein; and 

"METHOD AND APPARATUS FOR HEADER COMPRESSION IN A 
WIRELESS COMMUNICATION SYSTEM" by Raymond Hsu, having 
Attorney Docket No. 01 0500, filed concurrently herewith and assigned 
to the assignee hereof, and which is expressly incorporated by 
reference herein. 

Field 

[1003] The present invention relates to data processing systems generally 
and specifically, to methods and apparatus for security in a data processing 
system. 

Background 

[1004] Security in data processing and information systems, including 
communications systems, contributes to accountability, fairness, accuracy, 
confidentiality, operability, as well as a plethora of other desired criteria. 
Encryption, or the general field of cryptography, is used in electronic commerce, 
wireless communications, broadcasting, and has an unlimited range of 
applications. In electronic commerce, encryption is used to prevent fraud in and 
verify financial transactions. In data processing systems, encryption is used to 
verify a participant's identity. Encryption is also used to prevent hacking, protect 
Web pages, and prevent access to confidential documents. 
[1005] Asymmetric encryption system, often referred to as a cryptosystem, 
uses a same key (i.e., the secret key) to encrypt and decrypt a message. 
Whereas an asymmetric encryption system uses a first key (i.e., the public key) 
to encrypt a message and uses a different key (i.e., the private key) to decrypt 
it. Asymmetric cryptosystems are also called public key cryptosystems. A 
problem exists in symmetric cryptosystems in the secure provision of the secret 
key from a sender to a recipient. Further, a problem exists when keys or other 
encryption mechanisms are updated frequently. In a data processing system 
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methods of securely updating keys incur processing time, memory storage and 
other processing overhead. In a wireless communication system, updating keys 
uses valuable bandwidth used for transmission. 

[1006] The prior art does not provide a method for updating keys to a large 
group of mobile stations in order that they may access an encrypted broadcast. 
There is a need, therefore, for a secure and efficient method of updating keys in 
a data processing system. Further, there is a need for a secure and efficient 
method of updating keys in a wireless communication system. 

SUMMARY 

[1007] Embodiments disclosed herein address the above stated needs by 
providing a method for security in a data processing system. 
[1008] In one aspect a method for secure transmissions includes 
determining a registration key specific to a participant in a transmission, 
determining a first key, encrypting the first key with the registration key, 
determining a second key, encrypting the second key with the first key and 
updating the first and second keys. 

[1009] In another aspect, a method for secure reception of a transmission 
includes receiving a registration key specific to a participant in a transmission, 
receiving a first key, decrypting the first key with the registration key, receiving a 
second key, decrypting the second key with the first key, receiving a broadcast 
stream of information, and decrypting the broadcast stream of information using 
the second key. 

[1010] In stiil another aspect a wireless communication system supporting a 
broadcast service option has an infrastructure element including a receive 
circuitry, a user identification unit, operative to recover a short-time key for 
decrypting a broadcast message, and a mobile equipment unit adapted to apply 
the short-time key for decrypting the broadcast message. The user 
identification unit includes a processing unit operative to decrypt key 
information, and a memory storage unit for storing a registration key. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

[1011] FIG. 1A is a diagram of a cryptosystem. 

[1012] FIG. 1B is a diagram of a symmetric cryptosystem. 

[1013] FIG. 1C is a diagram of an asymmetric cryptosystem. 

[1014] FIG. 1 D is a diagram of a PGP encryption system. 

[1015] FIG. 1 E is a diagram of a PGP decryption system. 

[1016] FIG. 2 is a diagram of a spread spectrum communication system that 

supports a number of users. 

[1017] FIG. 3 is a block diagram of the communication system supporting 
broadcast transmissions. 

[1018] FIG. 4 is a block diagram of a mobile station in a wireless 
communication system. 

[1019] FIG. 5 is a model describing the updating of keys within a mobile 
. station used for controlling broadcast access. 

[1020] FIG. 6 is a model describing cryptographic operations within a (JIM. 
[1021] FIGs. 7A-7D illustrate a method of implementing security encryption 
in a wireless communication system supporting broadcast transmissions. 
[1022] FIG. 7E is a timing diagram of key update periods of a security option 
in a wireless communication system supporting broadcast transmissions. 
[1023] FIGs. 8A-8D illustrate application of a security encryption method in a 
wireless communication system supporting broadcast transmissions. 



DETAILED DESCRIPTION 



[1024] The word "exemplary" is used exclusively herein to mean "serving as 
an example, instance, or illustration." Any embodiment described herein as 
"exemplary" is not necessarily to be construed as preferred or advantageous 
over other embodiments. 

[1025] Wireless communication systems are widely deployed to provide 
various types of communication such as voice, data, and so on. These systems 
may be based on code division multiple access (CDMA), time division multiple 
access (TDMA), or some other modulation techniques. A CDMA system 
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provides certain advantages over other types of system, including increased 
system capacity. 

[1026] A system may be designed to support one or more standards such as 
the "TIA/EIA/IS-95-B Mobile Station-Base Station Compatibility Standard for 
Dual-Mode Wideband Spread Spectrum Cellular System" referred to herein as 
the IS-95 standard, the standard offered by a consortium named "3rd 
Generation Partnership Project" referred to herein as 3GPP, and embodied in a 
set of documents including Document Nos. 3G TS 25.211, 3G TS 25.212, 3G 
TS 25.213, and 3G TS 25.214, 3G TS 25.302, referred to herein as the W- 
CDMA standard, the standard offered by a consortium named "3rd Generation 
Partnership Project 2" referred to herein as 3GPP2, and TR-45.5 referred to 
herein as the cdma2000 standard, formerly called IS-2000 MC. The standards 
cited hereinabove are hereby expressly incorporated herein by reference. 
[1027] Each standard specifically defines the processing of data for 
transmission from base station. to mobile, and vipe ? versa. As an exemplary 
embodiment the following discussion considers a spread-spectrum 
communication system consistent with cdma2000 systems. Alternate 
embodiments may incorporate another standard/system. Still other 
embodiments may apply the security methods disclosed herein to any type of 
data processing system using a cryptosystem. 

[1 028] A cryptosystem is a method of disguising messages thus allowing a 
specific group of users to extract the message. FIG. 1A illustrates a basic 
cryptosystem 10. Cryptography is the art of creating and using cryptosystems. 
Cryptanalysis is the art of breaking cryptosystems, i.e., receiving and 
understanding the message when you are not within the specific group of users 
allowed access to the message. The original message is referred to as a 
plaintext message or plaintext. The encrypted message is called a ciphertext, 
wherein encryption includes any means to convert plaintext into ciphertext. 
Decryption includes any means to convert ciphertext into plaintext, i.e., recover 
the original message. As illustrated in FIG. 1A, the plaintext message is 
encrypted to form a ciphertext. The ciphertext is then received and decrypted to 
recover the plaintext. While the terms plaintext and ciphertext generally refer to 
data, the concepts of encryption may be applied to any digital information, 
including audio and video data presented in digital form. While the description 
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of the invention provided herein uses the term plaintext and ciphertext 
consistent with the art of cryptography, these terms do not exclude other forms 
of digital communications. 

[1029] A cryptosystem is based on secrets. A group of entities shares a 
secret if an entity outside this group cannot obtain the secret without 
significantly large amount of resources. This secret is said to serve as a security 
association between the groups of entities. 

[1030] A cryptosystem may be a collection of algorithms, wherein each 
algorithm is labeled and the labels are called keys. A symmetric encryption 
system, often referred to as a cryptosystem, uses a same key (i.e., the secret 
key) to encrypt and decrypt a message. A symmetric encryption system 20 is 
illustrated in FIG. 1 B, wherein both the encryption and decryption utilize a same 
private key. 

[1031] In contrast, an asymmetric encryption system uses a first key (i.e., 
the public key) to encrypt a message and uses a different key (i.e., the private 
key) to decrypt it. FIG. 1C illustrates an asymmetric encryption system 30 
wherein one key is provided for encryption and a second key for decryption. 
Asymmetric cryptosystems are also called public key cryptosystems. The public 
key is published and available for encrypting any message, however, only the 
private key may be used to decrypt the message encrypted with the public key. 
[1032] A problem exists in symmetric cryptosystems in the secure provision 
of the secret key from a sender to a recipient. In one solution a courier may be 
used to provide the information, or, a more efficient and reliable solution may be 
to use a public key cryptosystem, such as a public-key cryptosystem defined by 
Rivest, Shamir, and Adleman (RSA) which is discussed hereinbelow. The RSA 
system is used in the popular security tool referred to as Pretty Good Privacy 
(PGP), which is further detailed hereinbelow. For instance, an originally 
recorded cryptosystem altered letters in a plaintext by shifting each letter by n in 
the alphabet, wherein n is a predetermined constant integer value. In such a 
scheme, an "A" is replaced with a "D," etc., wherein a given encryption scheme 
may incorporate several different values of n. In this encryption scheme "n" is 
the key. Intended recipients are provided the encryption scheme prior to receipt 
of a ciphertext. In this way, only those knowing the key should be able to 
decrypt the ciphertext to recover the plaintext. However, by calculating the key 
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with knowledge of encryption, unintended parties may be able to intercept and 
decrypt the ciphertext, creating a security problem. 

[1033] More complicated and sophisticated cryptosystems employ strategic 
keys that are deter interception and decryption from unintended parties. A 
classic cryptosystem employs encryption functions E and decryption functions D 
such that: 

D_K(E_K(P)) = P, for any plaintext P. (1 ) 

[1034] In a public-key cryptosystem, E_K is easily computed from a known 
"public key" Y which in turn is computed from K. Y is published, so that anyone 
can encrypt messages. The decryption function D_K is computed from public 
key Y, but only with knowledge of a private key K. Without the private key K an 
unintended recipient may not decrypt the ciphertext so generated, in this way 
only the recipient who generated K can decrypt messages. 
[1035] RSA is a public-key cryptosystem defined by Rivest, Shamir, and 
Adleman. As an example, consider plaintexts as positive integers up to 2^ 12 . 
Keys are quadruples (p,q,e,d), with p given as a 256-bit prime number, q as a 
258-bit prime number, and d and e large numbers with (de - 1) divisible by'(p- 
1 )(q-1 ). Further, define the encryption function as: 

E_K(P) = P e mod pq, D_K(C) = C d mod pq. (2) 
[1036] While, E_K is easily computed from the pair (pq,e), there is no known 
simple way to compute D_K from the pair (pq.e)- Therefore, the recipient that 
generates K can publish (pq,e). It is possible to send a secret message to the 
recipient, as he is the one able to read the message. 

[1037] PGP combines features from symmetric and asymmetric encryption. 
FIGs. 1 D and 1E illustrate a PGP cryptosystem 50, wherein a plaintext message 
is encrypted and recovered. In FIG. 1D, the plaintext message is compressed 
to save modem transmission time and disk space. Compression strengthens 
cryptographic security by adding another level of translation to the encrypting 
and decrypting processing. Most cryptanalysis techniques exploit patterns 
found in the plaintext to crack the cipher. Compression reduces these patterns 
in the plaintext, thereby enhancing resistance to cryptanalysis. Note that one 
embodiment does not compress plaintext or other messages that are too short 
to compress or which don't compress well aren't compressed. 
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[1038] PGP then creates a session key which is a one-time-only secret key. 
This key is a random number that may be generated from any random event(s), 
such as random movements of mouse and the keystrokes while typing. The 
session key works with a secure encryption algorithm to encrypt the plaintext, 
resulting in ciphertext. Once the data is encrypted, the session key is then 
encrypted to the recipient's public key. This public key-encrypted session key is 
transmitted along with the ciphertext to the recipient. 

[1039] For decryption, as illustrated in FIG. 1E, the recipient's copy of PGP 
uses a private key to recover the temporary session key, which PGP then uses 
to decrypt the conventionally encrypted ciphertext. The combination of 
encryption methods takes advantage of the convenience of public key 
encryption and the speed of symmetric encryption. Symmetric encryption is 
generally much faster than public key encryption. Public key encryption in turn 
provides a solution to key distribution and data transmission issues. In 
.combination:, performance and key distribution are improved without any 
sacrifice in? security. 

[1040] A key is a value that works with a cryptographic algorithm to produce 
a specific ciphertext. Keys are basically very large numbers. Key size is 
measured in bits. In public key cryptography, security increases with key size, 
however, public key size and the symmetric encryption private key size are not 
generally related. While the public and private keys are mathematically related, 
a difficulty arises in deriving a private key given only a public key. Deriving the 
private key is possible given enough time and computing power, making the 
selection of key size an important security issue. The goal is to have a large 
key that is secure, while maintaining key size sufficiently small for quick 
processing. An additional consideration is the expected interceptor, specifically, 
what is the importance of a message to a third party, and how much resource 
does a third party have to decrypt. 

[1041] Larger keys will be cryptographically secure for a longer period of 
time. Keys are stored in encrypted form. PGP specifically stores keys in two 
files; one for public keys and one for private keys. These files are called 
keyrings. In application, a PGP encryption system adds the public keys of target 
recipients to the sender's public keyring. The sender's private keys are stored 
on the sender's private keyring. 
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[1042] As discussed in the examples given hereinabove, the method of 
distributing the keys used for encryption and decryption can be complicated. 
The "key exchange problem" involves first ensuring that keys are exchanged 
such that both the sender and receiver can perform encryption and decryption, 
respectively, and for bi-directional communication, such that the sender and 
receiver can both encrypt and decrypt messages. Further, it is desired that key 
exchange be performed so as to preclude interception by a third unintended 
party. Finally, an additional consideration is authentication providing assurance 
to the receiver that a message was encrypted by an intended sender and not a 
third party. In a private key exchange system, the keys are exchanged secretly 
providing improved security upon successful key exchange and valid 
authentication. Note that the private key encryption scheme implicitly provides 
authentication. The underlying assumption in a private key cryptosystem is that 
only the intended sender will have the key capable of encrypting messages 
delivered to the intended receiver. While public-key cryptographic methods 
solve a critical aspect of the 'key-exchange problem', specifically their 
resistance to analysis even with the presence a passive eavesdropper during 
exchange of keys, they do not solve all problems associated with key exchange. 
In particular, since the keys are considered 'public knowledge,' (particularly with 
RSA) some other mechanism is desired to provide authentication, as 
possession of keys alone (sufficient to encrypt messages) is no evidence of a 
particular unique identity of the sender, nor is possession of a corresponding 
decryption key by itself enough to establish the identity of the recipient. 
[1043] One solution is to develop a key distribution mechanism that assures 
that listed keys are actually those of the given entities, sometimes called a 
trusted authority, certificate authority, or third part escrow agent. The authority 
typically does not actually generate keys, but does ensure that the lists of keys 
and associated identities kept and advertised for reference by senders and 
receivers are correct and uncom promised. Another method relies on users to 
distribute and track each other's keys and trust in an informal, distributed 
fashion. Under RSA, if a user wishes to send evidence of their identity in 
addition to an encrypted message, a signature is encrypted with the private key. 
The receiver can use the RSA algorithm in reverse to verify that the information 
decrypts, such that only the sender could have encrypted the plaintext by use of 
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the secret key. Typically the encrypted 'signature' is a 'message digest' that 
comprises a unique mathematical "summary' of the secret message (if the 
signature were static across multiple messages, once known previous receivers 
could use it falsely). In this way, theoretically only the sender of the message 
could generate a valid signature for that message, thereby authenticating it for 
the receiver. 

[1044] A message digest is often computed using a cryptographic hash 
function. A cryptographic hash function computes a value (with a fixed number 
of bits) from any input, regardless of the length of the input. One property of a 
cryptographic hash function is this; given an output value, it is computationally 
difficult to determine an input that wiil result in that output. An example of a 
cryptographic hash function is SHA-1 as described in "Secure Hash Standard," 
FIPS PUB 180-1, promulgated by the Federal Information Processing 
Standards Publications (FIPS PUBS) and issued by the National Institute of 
Standards and Technology. 

[1045] FIG. 2 serves as an; example of a communications system 100 that 
supports a number of users and is capable of implementing at least some 
aspects and embodiments of the invention. Any of a variety of algorithms and 
methods may be used to schedule transmissions in system 100. System 100 
provides communication for a number of cells 102A through 102G, each of 
which is serviced by a corresponding base station 104A through 104G, 
respectively. In the exemplary embodiment, some of base stations 104 have 
multiple receive antennas and others have only one receive antenna. Similarly, 
some of base stations 104 have multiple transmit antennas, and others have 
single transmit antennas. There are no restrictions on the combinations of 
transmit antennas and receive antennas. Therefore, it is possible for a base 
station 104 to have multiple transmit antennas and a single receive antenna, or 
to have multiple receive antennas and a single transmit antenna, or to have 
both single or multiple transmit and receive antennas. 

[1046] Terminals 106 in the coverage area may be fixed (i.e., stationary) or 
mobile. As shown in FIG. 2, various terminals 106 are dispersed throughout 
the system. Each terminal 106 communicates with at least one and possibly 
more base stations 104 on the downlink and uplink at any given moment 
depending on, for example, whether soft handoff is employed or whether the 
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terminal is designed and operated to (concurrently or sequentially) receive 
multiple transmissions from multiple base stations. Soft handoff in CDMA 
communications systems is well known in the art and is described in detail in 
U.S. Patent No. 5,101,501, entitled "METHOD AND SYSTEM FOR 
PROVIDING A SOFT HANDOFF IN A CDMA CELLULAR TELEPHONE 
SYSTEM," which is assigned to the assignee of the present invention. 
[1047] The downlink refers to transmission from the base station to the 
terminal, and the uplink refers to transmission from the terminal to the base 
station. In the exemplary embodiment, some of terminals 106 have multiple 
receive antennas and others have only one receive antenna. In FIG. 2, base 
station 104A transmits data to terminals 1Q6A and 106J on the downlink, base 
station 104B transmits data to terminals 106B and 106J, base station 104C 
transmits data to terminal 106C, and so on. 

[1048] Increasing demand for wireless data transmission and the expansion 
of services available via wireless communication technology have led to the 
development of specific data services. : One such service is referred to as High 
Data Rate (HDR). An exemplary HDR service is proposed in "E1A/TIA-IS856 
cdma2000 High Rate Packet Data Air Interface Specification" referred to as "the 
HDR specification." HDR service is generally an overlay to a voice 
communication system that provides an efficient method of transmitting packets 
of data in a wireless communication system. As the amount of data transmitted 
and the number of transmissions increases, the limited bandwidth available for 
radio transmissions becomes a critical resource. There is a need, therefore, for 
an efficient and fair method of scheduling transmissions in a communication 
system that optimizes use of available bandwidth. In the exemplary 
embodiment, system 100 illustrated in FIG. 2 is consistent with a CDMA type 
system having HDR service. 

[1049] According to one embodiment, the system 1 00 supports a high-speed 
multimedia broadcasting service referred to as High-Speed Broadcast Service 
(HSBS). An example application for HSBS is video streaming of movies, sports 
events, etc. The HSBS service is a packet data service based on the Internet 
Protocol (IP). According to the exemplary embodiment, a service provider 
indicates the availability of such high-speed broadcast service to the users. The 
users desiring the HSBS service subscribe to receive the service and may 
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discover the broadcast service schedule through advertisements, Short 
Management System (SMS), Wireless Application Protocol (WAP), etc. Mobile 
users are referred to as Mobile Stations (MSs). Base Stations (BSs) transmit 
HSBS related parameters in overhead messages. When an MS desires to 
receive the broadcast session, the MS reads the overhead messages and 
learns the appropriate configurations. The MS then tunes to the frequency 
containing the HSBS channel, and receives the broadcast service content. 
[1050] The service being considered is a high-speed multimedia 
broadcasting service. This service is referred to as High-Speed Broadcast 
Service (HSBS) in this document. One such example is video streaming of 
movies, sports events, etc. This service will likely be a packet data service 
based on the Internet Protocol (IP). 

[1051] The service provider will indicate the availability of such high-speed 
broadcast service to the users. The mobile station users who desire such 
service will subscribe to receive this service and may discover the broadcast 
service schedule through advertisements, SMS, WAP, etc. Base stations will 
transmit broadcast service related parameters in overhead messages. The 
mobiles that wish to listen to the broadcast session will read these messages to 
determine the appropriate configurations, tune to the frequency containing the 
high-speed broadcast channel, and start receiving the broadcast service 
content. 

[1052] There are several possible subscription/revenue models for HSBS 
service, including free access, controlled access, and partially controlled 
access. For free access, no subscription is needed by the mobiles to receive 
the service. The BS broadcasts the content without encryption and interested 
mobiles can receive the content. The revenue for the service provider can be 
generated through advertisements that may also be transmitted in the broadcast 
channel. For example, upcoming movie-clips can be transmitted for which the 
studios will pay the service provider. 

[1053] For controlled access, the MS users subscribe to the service and pay 
the corresponding fee to receive the broadcast service. Unsubscribed users are 
not able to receive the HSBS service. Controlled access can be achieved by 
encrypting the HSBS transmission/content so that only the subscribed users 
can decrypt the content. This may use over-the-air encryption key exchange 
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procedures. This scheme provides strong security and prevents theft-of- 
service. 

[1054] A hybrid access scheme, referred to as partial controlled access, 
provides the HSBS service as a subscription-based service that is encrypted 
with intermittent unencrypted advertisement transmissions. These 
advertisements may be intended to encourage subscriptions to the encrypted 
HSBS service. Schedule of these unencrypted segments could be known to the 
MS through external means. 

[1055] A wireless communication system 200 is illustrated in FIG. 3, wherein 
video and audio information is provided to Packetized Data Service Network 
(PDSN) 202 by a Content Server (CS) 201. The video and audio information 
may be from televised programming or a radio transmission. The information is 
provided as packetized data, such as in IP packets. The PDSN 202 processes 
the IP packets for distribution within an Access Network (AN). As illustrated the 
AN is defined as the portions of the system including a BS 204 in 
communication with multiple MS 206. The PDSN 202 is coupled to the BS 204. 
For HSBS service, the BS 204 receives the stream of information from the 
PDSN 202 and provides the information on a designated channel to subscribers 
within the system 200. To control the access, the content is encrypted by the 
CS 201 before being provided to the PDSN 202. The subscribed users are 
provided with the decryption key so that the IP packets can be decrypted. 
[1056] FIG. 4 details an MS 300, similar to MS 206 of FIG. 3. The MS 300 
has an antenna 302 coupled to receive circuitry 304. The MS 300 receives 
transmissions from a BS (not shown) similar to BS 204 of FIG. 3. The MS 300 
includes a User Identification Module (UIM) 308 and a Mobile Equipment (ME) 
306. The receive circuitry is coupled to the UIM 308 and the ME 306. The UIM 
308 applies verification procedures for security of the HSBS transmission and 
provides various keys to the ME 306. The ME 306 may be coupled to 
processing unit 312. The ME 306 performs substantial processing, including, 
but not limited to, decryption of HSBS content streams. The ME 306 includes a 
memory storage unit, MEM 310. In the exemplary embodiment the data in the 
ME 306 processing (not shown) and the data in the ME memory storage unit, 
MEM 310 may be accessed easily by a non-subscriber by the use of limited 
resources, and therefore, the ME 306 is said to be insecure. Any information 
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passed to the ME 306 or processed by the ME 306 remains securely secret for 
only a short amount of time. It is therefore desired that any secret information, 
such as key(s), shared with the ME 306 be changed often. 
[1057] The UIM 308 is trusted to store and process secret information (such 
as encryption keys) that should remain secret for a long time. As the UIM 308 is 
a secure unit, the secrets stored therein do not necessarily require the system 
to change the secret information often. The UIM 308 includes a processing unit 
referred to as a Secure UIM Processing Unit (SUPU) 316 and memory storage 
unit referred to as a Secure UIM Memory Unit (SUMU) 314 that is trusted to be 
secure. Within the UIM 308, SUMU 314 stores secret information in such a 
way that as to discourage unauthorized access to the information. If the secret 
information is obtained from the UIM 308, the access will require a significantly 
large amount of resources. Also within the UIM 308, the SUPU 316 performs 
computations on values that may be external to the UIM 308 and/or internal to 
the UIM 308. The results of the computation may be stored in the SUMU 314 or 
passed to the ME 306. The computations performed with the SUPU 316 can 
only be obtained from the UIM 308 by an entity with significantly large amount of 
resources. Similarly, outputs from the SUPU 316 that are designated to be 
stored within the SUMU 314 (but not output to the ME 306) are designed such 
that unauthorized interception requires significantly large amount of resources. 
In one embodiment, the UIM 308 is a stationary unit within the MS 300. Note 
that in addition to the secure memory and processing within the UIM 308, the 
UIM 308 may also include non-secure memory and processing (not shown) for 
storing information including telephone numbers, e-mail address information, 
web page or URL address information, and/or scheduling functions, etc, 
[1058] Alternate embodiments may provide a removable and/or 
reprogrammable UIM. In the exemplary embodiment, the SUPU 316 does not 
have significant processing power for functions beyond security and key 
procedures, such as to allow encryption of the broadcast content of the HSBS. 
Alternate embodiments may implement a UIM having stronger processing 
power. 

[1059] The UIM is associated with a particular user and is used primarily to 
verify that the MS 300 is entitled to the privileges afforded the user, such as 
access to the mobile phone network. Therefore, a user is associated with the 
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UiM 308 rather than an MS 300, The same user may be associated with 
multiple UIM 308. 

[1060] The broadcast service faces a problem in determining how to 
distribute keys to subscribed users. To decrypt the broadcast content at a 
particular time, the ME must know the current decryption key. To avoid theft-of- 
service, the decryption key should be changed frequently, for example, every 
minute. These decryption keys are called Short-term Keys (SK). The SK is 
used to decrypt the broadcast content for a short-amount of time so the SK can 
be assumed to have some amount of intrinsic monetary value for a user. For 
example, this intrinsic monetary value may be a portion of the registration costs. 
Assume that the cost of a non-subscriber obtaining SK from the memory 
storage unit, MEM 310, of a subscriber exceeds the intrinsic monetary value of 
SK. That is, the cost of obtaining SK (illegitimately) exceeds the reward, so 
there is no benefit. Consequently, there is no need to protect SK in the memory 
storage unit, MEM 310. However, if a secret key has a lifetime longer than that 
of an SK, then the cost of obtaining this secret key (illegitimately) is less than 
the reward. In this situation, there is a benefit in obtaining such a key from the 
memory storage unit, MEM 310. Hence, ideally the memory storage unit, MEM 
31 0 will not store secrets with a lifetime longer than that of an SK. 
[1061] The channels used by the CS (not shown) to distribute the SK to the 
various subscriber units are considered insecure. Therefore, when distributing 
a given SK, the CS desires to use a technique that hides the value of the SK 
from non-subscribed users. Furthermore, the CS distributes the SK to each of a 
potentially large number of subscribers for processing in respective MEs within 
a relatively short timeframe. Known secure methods of key transmission are 
slow and require transmission of a large number of keys, and are generally not 
feasible for the desired criteria. The exemplary embodiment is a feasible 
method of distributing decryption keys to a large set of subscribers within a 
small time-frame in such a way that non-subscribers cannot obtain the 
decryption keys. 

[1062] In the exemplary embodiment, the MS 300 supports HSBS in a 
wireless communication system. To obtain access to HSBS, the user must 
register and then subscribe to the service. Once the subscription is enabled, 
the various keys are updated periodically. In the registration process the CS 
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and UIM 308 agree on a Registration Key (RK) that serves as a security 
association between the user and the CS. The CS may then send the UIM 
further secret information encrypted with the RK. The RK is kept as a secret in 
the UIM 308, and is unique to a given UIM, i.e., each user is assigned a 
different RK. The registration process alone does not give the user access to 
HSBS. As stated hereinabove, after registration the user subscribes to the 
service. In the subscription process the CS sends the UIM 308 the value of a 
common Broadcast Access Key (BAK). The CS sends the MS 300, and 
specifically UIM 308, the value of BAK encrypted using the RK unique to UIM 
308. The UIM 308 is able to recover the value of the original BAK from the 
encrypted version using the RK. The BAK serves as a security association 
between the CS and the group of subscribed users. The CS then broadcasts 
data called SK Information (SKI) that is combined with the BAK in the UIM 308 
to derive SK. The UIM 308 then passes SK to the ME 306. In this way, the CS 
can efficiently distribute new values of SK to the ME of subscribed users. 
[1063]' The following paragraphs discuss the registration process in more 
detail. When a user registers with a given CS, the UIM 308 and the CS (not 
shown) set-up a security association. That is, the UIM 308 and the CS agree on 
a secret key RK. The RK is unique to each UIM 308, although if a user has 
multiple UIMs then these UIMs may share the same RK dependent on the 
policies of the CS. This registration may occur when the user subscribes to a 
broadcast channel offered by the CS or may occur prior to subscription. A 
single CS may offer multiple broadcast channels. The CS may choose to 
associate the user with the same RK for all channels or require the user to 
register for each channel and associate the same user with different RKs on 
different channels. Multiple CSs may choose to use the same registration keys 
or require the user to register and obtain a different RK for each CS. 
[1064] Two common scenarios for setting up this security association include 
the Authenticated Key Agreement (AKA) method (as used in 3GPP) and the 
Internet Key Exchange (IKE) method as used in IPsec. In either case the UIM 
memory unit SUMU 314 contains a secret key referred to as the A-key. As an 
example, the AKA method is described. In the AKA method the A-key is a 
secret known only to the UIM and a trusted third party (TTP): the TTP may 
consist of more than one entity. The TTP is typically the mobile service provider 
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with whom the user is registered. Ail communication between the CS and TTP 
is secure, and the CS trusts that the TTP will not assist unauthorized access to 
the broadcast service. When the user registers, the CS informs the TTP that 
the user wishes to register for the service and provides verification of the user's 
request. The TTP uses a function (similar to a cryptographic hash function) to 
compute the RK from the A-key and additional data called Registration Key 
Information (RKI). The TTP passes RK, RKI to the CS over a secure channel 
along with other data not relevant to this submission. The CS sends RKI to the 
MS 300. The receiver circuitry 304 passes RKI to the UIM 308 and possibly 
passes RKI to the ME 306. The UIM 308 computes RK from RKI and the A-key 
that is stored in the UIM memory unit SUMU 314. The RK is stored in the UIM 
memory unit SUMU 314 and is not provided directly to the ME 306. Alternate 
embodiments may use an IKE scenario or some other method to establish the 
RK. The RK serves as the security association between the CS and UIM 308. 
[1065] In the A KA method, the RK is a secret shared between the CS, UIM 
and TTP. Therefore, as used herein, the AKA method implies that any security 
association between the CS and UIM implicitly includes the TTP. The inclusion 
of the TTP in any security association is not considered a breach of security, as 
the CS trusts the TTP not to assist in unauthorized access to the broadcast 
channel. As stated hereinabove, if a key is shared with the ME 306, it is 
desirable to change that key often. This is due to the risk of a non-subscriber 
accessing information stored in memory storage unit, MEM 310 and thus 
allowing access to a controlled or partially controlled service. The ME 306 
stores SK (key information used for decrypting broadcast content) in memory 
storage unit, MEM 310. The CS must send sufficient information for subscribed 
users to compute SK. If the ME 306 of a subscribed user could compute SK 
from this information, then additional information required to compute SK cannot 
be secret. In this case, assume that the ME 306 of a non-subscribed user could 
also compute SK from this information. Hence, the value of SK must be 
computed in the SUPU 316, using a secret key shared by the CS and SUMU 
314. The CS and SUMU 314 share the value of RK, however each user has a 
unique value of RK. There is insufficient time for the CS to encrypt SK with 
every value of RK and transmit these encrypted values to each subscribed user. 
Some other technique is required. 
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[1066] The following paragraphs discuss the subscription process in more 
detail. To ensure the efficient distribution of the security information SK, the CS 
periodically distributes a common Broadcast Access Key (BAK) to each 
subscriber UIM 308. For each subscriber the CS encrypts BAK using the 
corresponding RK to obtain a value called BAKI (BAK Information). The CS 
sends the corresponding BAKI to MS 300 of the subscribed user. For example, 
BAK may be transmitted as an IP packet encrypted using the RK corresponding 
to each MS. In the exemplary embodiment, the BAKI is an IPSec packet. In the 
exemplary embodiment, BAKI is an IPSec packet containing BAK that is 
encrypted using RK as the key. Since RK is a per-user key, the CS must send 
the BAK to each subscriber individually; thus, the BAK is not sent over the 
broadcast channel. The MS 300 passes the BAKI to the UIM 308. The SUPU 
316 computes BAK using the value of RK stored in SUMU 314 and the value of 
BAKI. The value of BAK is then stored in the SUMU. In the exemplary 
embodiment, the BAKI contains a Security Parameter Index (SPI) value 
instructing the MS 300 to pass BAKI to the UIM 308, and instructing the UIM 
308 to use the RK for decrypting the BAKI. 

[1067] The period for updating the BAK is desired to be sufficient to allow the 
CS to send the BAK to each subscriber individually, without incurring significant 
overhead. Since the ME 306 is not trusted to keep secrets for a long time, the 
UIM 308 does not provide the BAK to the ME 306. The BAK serves as the 
security association between the CS and the group of subscribers of HSBS 
service. 

[1068] The following paragraph discusses how the SK is updated following a 
successful subscription process. Within each period for updating the BAK, a 
short-term interval is provided during which SK is distributed on a broadcast 
channel. The CS uses a cryptographic function to determine two values SK and 
SKI (SK Information) such that SK can be determined from BAK and SKI. For 
example, SKI may be the encryption of SK using BAK as the key. In the 
exemplary embodiment, SKI is an IPSec packet containing SK that is encrypted 
using BAK as the key. Alternatively, SK may be the result of applying a 
cryptographic hash function to the concatenation of the blocks SKI and BAK. 
[1069] Some portion of SKI may be predictable. For example, a portion of 
SKI may be derived from the system time during which this SKI is valid. This 
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portion, denoted SKI_A, need not be transmitted to the MS 300 as part of the 
broadcast service. The remainder of SKI, SKI_B may be unpredictable. The 
SK1_B need not be transmitted to the MS 300 as part of the broadcast service. 
The MS 300 reconstructs SKI from SKI_A and SKI_B and provides SKI to U1M 
308. The SKI may be reconstructed within the UIM 308. The value of SKI must 
change for each new SK. Thus, either SKI_A and/or SKI_E3 must change when 
computing a new SK. The CS sends SKI_B to BS for broadcast transmission. 
The BS broadcasts SKI_B, which is detected by the antenna 302 and passed to 
the receive circuitry 304. Receive circuitry 304 provides SKI_B to the MS 300, 
wherein the MS 300 reconstructs SKI. The MS 300 provides SKI to UIM 308, 
wherein the UIM 308 obtains the SK using the BAK stored in SUMU 314. The 
SK is then provided by UIM 308 to ME 306. The ME 306 stores the SK in 
memory storage unit, MEM 310. The ME 306 uses the SK to decrypt broadcast 
transmissions received from the CS. 

[1070] In the exemplary embodiment, the SKI also contains a Security 
Parameter Index (SPt) value instructing the MS 300 to pass SKI to the UIM 308, 
and instructing the UIM 308 to use the BAK for decrypting the SKI. After 
decryption, the UIM 308 passes the SK to the ME 306, wherein ME 306 uses 
the SK to decrypt broadcast content. 

[1071] The CS and BS agree on some criteria for when SKl_B is to be 
transmitted. The CS may desire to reduce the intrinsic monetary value in each 
SK by changing SK frequently, in this situation, the desire to change SKI_B 
data is balanced against optimizing available bandwidth. The SKI_B may be 
transmitted on a channel other than the broadcast channel. When a user 
"tunes" to the broadcast channel, the receive circuitry 304 obtains information 
for locating the broadcast channel from a "control channel." It may be desirable 
to allow quick access when a user "tunes" to the broadcast channel. This 
requires the ME 306 to obtain SKI within a short amount of time. The ME 306 
will already know SKI„A, however, the BS must provide SKIJ3 to ME 300 within 
this short amount of time. For example, the BS may frequently transmit SKI_B 
on the control channel, (along with the information for locating the broadcast 
channel), or frequently transmit SKI_B on the broadcast channel. The more 
often that the BS "refreshes" the value of SKIJ3, the faster the MS 300 can 
access the broadcast message. The desire to refresh SKI_B data is balanced 
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against optimizing available bandwidth, as transmitting SKIJ3 data too 
frequently may use an unacceptable amount of bandwidth in the control channel 
or broadcast channel. 

[1072] This paragraph discusses the encryption and transmission of the 
broadcast content. The CS encrypts the broadcast content using the current 
SK. The exemplary embodiment employs an encryption algorithm such as the 
Advanced Encryption Standard (AES)h Cipher Algorithm. In the exemplary 
embodiment, the encrypted content is then transported by an IPsec packet 
according to the Encapsulating Security Payload (ESP) transport mode. The 
IPsec packet also contains an SPI value that instructs the ME 306 to use the 
current SK to decrypt received broadcast content. The encrypted content is 
sent via the broadcast channel. 

[1073] Receive circuitry 304 provides the RKI and BAKI directly to the UIM 
308. Further, receive circuitry 304 provides the SKl_B to an appropriate part of 
the MS 300 where it is combined with SKI_A to obtain SKI. The SKI is provided 
to the UIM 308 by the relevant part of the MS 300; The UIM 308 computes RK 
from the RKI and A-key, decrypts the BAKI using the RK to obtain BAK, and 
computes the SK using the SKI and BAK, to generate an SK for use by the ME 
306. The ME 306 decrypts the broadcast content using the SK. The UIM 308 
of the exemplary embodiment is not sufficiently powerful for decryption of 
broadcast content in real time, and, therefore, SK is passed to the ME 306 for 
decrypting the broadcast content. 

[1074] FIG. 5 illustrates the transmission and processing of keys RK, BAK 
and SK according to the exemplary embodiment. As illustrated, at registration 
the MS 300 receives the RKI and passes it to UIM 308, wherein the SUPU 316 
computes RK using RKI and the A-key, and stores the RK in UIM memory 
storage SUMU 314. The MS 300 periodically receives the BAKI that contains 
BAK encrypted using the RK value specific to UIM 308. The encrypted BAKI is 
decrypted by SUPU 316 to recover the BAK, which is stored in UIM memory 
storage SUMU 314. The MS 300 further periodically receives an SKI_B that it 
combines with SKLA to form SKI. The SUPU 316 computes SK from SKI and 
BAK. The SK is provided to ME 306 for decrypting broadcast content. 
[1075] In the exemplary embodiment the CS keys are not necessarily 
encrypted and transmitted to the MSs; the CS may use an alternative method. 
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The key information generated by the CS for transmission to each MS provides 
sufficient information for the MS to calculate the key. As illustrated in the 
system 350 of FIG. 6, the RK is generated by the CS, but RK Information (RKI) 
is transmitted to the MS. The CS sends information sufficient for the UIM to 
derive the RK, wherein a predetermined function is used to derive the RK from 
transmitted information from the CS. The RKI contains sufficient information for 
the MS to determine the original RK from the A_key and other values; such as 
system time, using a predetermined public function labeled d1, wherein: 
[1076] RK = d1 (A-key, RKI). (3) 

[1077] In the exemplary embodiment, the function d1 defines a 
cryptographic-type function. According to one embodiment, RK is determined 
as: 

[1 078] RK = SHA' (A-key || RKI ), (4) 

[1079] wherein denotes the concatenation of the blocks containing A-key 
and RKI, and SHA'(X) denotes the last 128-bits of output of the Secure Hash 
Algorithm SHA-1 given the input X. In an alternative embodiment, RK is 
determined as: 

[1 080] RK = AES(A-key,RKI), (5) 

[1081] wherein AES(X,Y) denotes the encryption of the 128-bit block RKI 
using the 128-bit A-key. In a further embodiment based on the AKA protocol, 
RK is determined as the output of the 3GPP key generation function f3, wherein 
RKI includes the value of RAND and appropriate values of AMF and SQN as 
defined by the standard. 

[1082] The BAK is treated in a different manner because multiple users 
having different values of RK must compute the same value of BAK. The CS 
may use any technique to determine BAK. However, the value of BAKI 
associated with a particular UIM 308 must be the encryption of BAK under the 
unique RK associated with that UIM 308. The SUPU 316 decrypts BAKi using 
RK stored in the SUMU 314 according to the function labeled d2, according to: 
[1083] BAK = d2(BAKI, RK). (9) 

[1084] In an alternate embodiment, the CS may compute BAKI by applying 
a decryption process to BAK using RK, and the SUPU 316 obtains BAK by 
applying the encryption process to BAKI using RK. This is considered 
equivalent to the CS encrypting BAK and the SUPU 316 decrypting BAKI. 
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Alternate embodiments may implement any number of key combinations in 
addition to or in place of those illustrated in FIG. 6. 

[1 085] The SK is treated in a similar manner to RK. First SKI is derived from 

the SKI_A and SKI_B (SKI_B is the information transmitted from CS to MS). 

Then a predetermined function labeled d3 is used to derive the SK from SKI and 

BAK (stored in the SUMU 314), according to: 

[1086] SK = d3(BAK, SKI). (6) 

[1087] In one embodiment, the function d3 defines a cryptographic-type 

function. In an exemplary embodiment, SK is computed as: 

[1 088] SK = SHA( BAK || SKI ), (7) 

[1089] while in another embodiment, SK is computed as 

[1 090] SK = AES( BAK, SKI ). (8) 

[1091] A method of providing the security for a broadcast message is 

illustrated in FIGs. 7A-7D. FIG. 7A illustrates a registration process 400 

wherein a subscriber negotiates registration with the CS at step 402. The 

registration at step 404 provides the UIM a unique RK. The UIM stores the RK 

in a Secure Memory Unit (SUMU) at step 406. FIG. 7B illustrates subscription 

processing 420 between a CS and a MS. At step 422 the CS generates a BAK 

for a BAK time period T1 . The BAK is valid throughout the BAK time period T1 , 

wherein the BAK is periodically updated. At step 424 the CS authorizes the 

UIM to have access to the Broadcast Content (BC) during the BAK timer period 

T1 . At step 426 the CS encrypts the BAK using each individual RK for each 

subscriber. The encrypted BAK is referred to as the BAKI. The CS then 

transmits the BAKI to the UIM at step 428. The UIM receives the BAKI and 

performs decryption using the RK at step 430. The decrypted BAKI results in 

the originally generated BAK. The UIM stores the BAK n a SUMU at step 432. 

The UIM then receives the broadcast session and is able to access the BC by 

applying the BAK to decryption of the encrypted broadcast (EBC). 

[1092] FIG. 7C illustrates a method of updating keys for security encryption 

in a wireless communication system supporting broadcast service. The method 

440 implements time periods as given in FIG. 7E. The BAK is updated 

periodically having a time period T1. A timer t1 is initiated when BAK is 

calculated and times out at T1. A variable is used for calculating the SK 

referred to as SK_RAND, which is updated periodically having a time period T2. 
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A timer t2 is initiated when the SK_RAND is generated and times out at T2. In 
one embodiment, the SK is further updated periodically having a period of T3. 
A timer t3 is initiated when each SK is generated and time out at time T3. The 
SK_RAND is generated at the CS and provided periodically to the MS. The MS 
and the CS use SK_RAND to generate the SK, as detailed hereinbelow. 
[1093] A first timer t1 is reset when the applicable value of BAK is updated. 
The length of time between two BAK updates is the BAK update period. In the 
exemplary embodiment the BAK update period is a month, however, alternate 
embodiments may implement any time period desired for optimum operation of 
the system, or to satisfy a variety of system criteria. 

[1094] Continuing with FIG. 7C, the method 440 initializes the timer t2 at 
step 442 to start the SK_REG time period T2. The CS generates SK_RAND 
and provides the value to transmit circuitry for transmission throughout the 
system at step 444. The timer t3 is initialized at step 446 to start the SK time 
period T3. The CS then encrypts the BC using the current SK at step 448. , The 
encrypted product is the EBC, wherein the CS provides the EBC to transmit 
circuitry for transmission in the system. If the timer t2 has expired at decision 
diamond 450, processing returns to step 442. While t2 is less than T2, if the 
timer t3 has expired at decision diamond 452, processing returns to step 446; 
else processing returns to 450. 

[1095] FIG. 7D illustrates the operation of the MS accessing a broadcast 
service. The method 460 first synchronizes the timers t2 and t3 with the values 
at the CS at step 462. The UIM of the MS receives the SK_RAND generated by 
the CS at step 464. At step 466 the UIM generates the SK using the 
SK_RAND, BAK, and a time measurement. The UIM passes the SK to the ME 
of the MS. The UIM then decrypts the received EBC using the SK to extract the 
original BC at step 468. When the timer t2 expires at step 470 processing 
returns to step 462. While the timer t2 is less than T2, if the timer t3 expires at 
step 472, the timer t3 is initialized at step 474 and returns to 466. 
[1096] When the user subscribes to the broadcast service for a particular 
BAK update period, the CS sends the appropriate information BAK! 
(corresponding to the BAK encrypted with the RK). This typically occurs prior to 
the beginning of this BAK update period or when the MS first tunes to the 
broadcast channel during this BAK update period. This may be initiated by the 



WO 02/080449 



24 



PCT/US02/09835 



MS or CS according to a variety of criteria. Multiple BAKI may be transmitted 
and decrypted simultaneously. 

[1097] Note that when expiration of the BAK update period is imminent the 
MS may request the updated BAK from the CS if the MS has subscribed for the 
next BAK update period. In an alternate embodiment the first timer t1 is used 
by the CS, where upon expiration of the timer, i.e., satisfaction of the BAK 
update period, the CS transmits the BAK. 

[1098] Note that it is possible for a user to receive a BAK during a BAK 
update period, wherein, for example, a subscriber joins the service mid-month 
when the BAK updates are performed monthly. Additionally, the time periods 
for BAK and SK updates may be synchronized, such that all subscribers are 
updated at a given time. 

[1099] FIG. 8A illustrates the registration process in a wireless 
communication system 500 according to the exemplary embodiment. The CS 
502 negotiates with each subscriber, i.e., MS 512, to generate a specific RK to 
each of the subscribers. The RK is provided to the SUMU unit within the UIM of 
each MS. As illustrated, the CS 502 generates RKt which is stored in SUMUi 
510 within UIMi 512. Similarly, the CS 502 generates RK 2 and RK N which are 
stored in SUMU 2 520 within UIM 2 522 and SUMU N 530 within UIM N 532, 
respectively. 

[1100] FIG. 8B illustrates the subscription process in the system 500. The 
CS 502 further includes multiple encoders 504. Each of the encoders 504 
receives one of the unique RKs and the BAK value generated in the CS 502. 
The output of each encoder 504 is a BAKI encoded specifically for a subscriber. 
The BAKI is received at the UIM of each MS, such as UIMi 512. Each UIM 
includes a SUPU and a SUMU, such as SUPU n 514 and SUMUi 510 of UIMi 
512. The SUPU includes a decoder, such as decoder 516 that recovers the 
BAK by application of the RK of the UIM. The process is repeated at each 
subscriber. 

[1101] Key management and updates are illustrated in FIG, 8C, wherein the 
CS applies a function 508 to generate a value of SKJWJD, which is an interim 
value used by the CS and MS to calculate SK. Specifically, the function 508 
applies the BAK value, the SK_RAND and a time factor. While the embodiment 
illustrated in FIG. 8C applies a timer to determine when to update the SK, 
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alternate embodiments may use alternate measures to provide periodic 
updates, for example occurrence of an error or other event. The CS provides 
the SK_RAND value to each of the subscribers, wherein a function 518 resident 
in each UIM applies the same function as in function 508 of the CS. The 
function 518 operates on the SKJ^AND, BAK and a timer value to generate a 
SK that is stored in a memory location in the ME, such as MEMi 542 of MEi 
540. 

[1102] FIG. 8D illustrates the processing of BC after registration and 
subscription. The CS 502 includes an encoder 560 that encodes the BC using 
the current SK to generate the EBC. The EBC is then transmitted to the 
subscribers. Each MS includes an encoder, such as encoder 544, that extracts 
the BC from the EBC using the SK. 

[1 103] While the present invention has been described with respect to an 
exemplary embodiment of a wireless communication system supporting a uni- 
directional broadcast service, the encryption methods and key management 
described hereinabove is further applicable to other data processing systems, 
including a multi-cast type broadcast system. Still further, application of the 
present invention to any data processing system wherein multiple subscribers 
access a single transmission of secure information through an insecure 
channel. 

[1104] Those of skill in the art would understand that information and signals 
may be represented using any of a variety of different technologies and 
techniques. For example, data, instructions, commands, information, signals, 
bits, symbols, and chips that may be referenced throughout the above 
description may be represented by voltages, currents, electromagnetic waves, 
magnetic fields or particles, optical fields or particles, or any combination 
thereof. 

[1105] Those of skill would further appreciate that the various illustrative 
logical blocks, modules, circuits, and algorithm steps described in connection 
with the embodiments disclosed herein may be implemented as electronic 
hardware, computer software, or combinations of both. To clearly illustrate this 
interchangeability of hardware and software, various illustrative components, 
blocks, modules, circuits, and steps have been described above generally in 
terms of their functionality. Whether such functionality is implemented as 
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hardware or software depends upon the particular application and design 
constraints imposed on the overall system. Skilled artisans may implement the 
described functionality in varying ways for each particular application, but such 
implementation decisions should not be interpreted as causing a departure from 
the scope of the present invention. 

[1106] The various illustrative logical blocks, modules, and circuits described 
in connection with the embodiments disclosed herein may be implemented or 
performed with a general purpose processor, a digital signal processor (DSP), 
an application specific integrated circuit (ASIC), a field programmable gate array 
(FPGA) or other programmable logic device, discrete gate or transistor logic, 
discrete hardware components, or any combination thereof designed to perform 
the functions described herein. A general purpose processor may be a 
microprocessor, but in the alternative, the processor may be any conventional 
processor, controller, microcontroller, or state machine. A processor may also 
be implemented as a combination of computing devices, e.g., a combination of 
a DSP and a microprocessor, a plurality of microprocessors, one or more 
microprocessors in conjunction with a DSP core, or any other such 
configuration. 

[1107] The steps of a method or algorithm described in connection with the 
embodiments disclosed herein may be embodied directly in hardware, in a 
software module executed by a processor, or in a combination of the two. A 
software module may reside in RAM memory, flash memory, ROM memory, 
EPROM memory, EEPROM memory, registers, hard disk, a removable disk, a 
CD-ROM, or any other form of storage medium known in the art. An exemplary 
storage medium is coupled to the processor such the processor can read 
information from, and write information to, the storage medium, in the 
alternative, the storage medium may be integral to the processor. The 
processor and the storage medium may reside in an ASIC. The ASIC may 
reside in a user terminal. In the alternative, the processor and the storage 
medium may reside as discrete components in a user terminal. 
[1108] The previous description of the disclosed embodiments is provided to 
enable any person skilled in the art to make or use the present invention. 
Various modifications to these embodiments will be readily apparent to those 
skilled in the art, and the generic principles defined herein may be applied to 
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other embodiments without departing from the spirit or scope of the invention. 
Thus, the present invention is not intended to be limited to the embodiments 
shown herein but is to be accorded the widest scope consistent with the 
principles and novel features disclosed herein. 



[1109] 



WHAT IS CLAIMED IS: 



WO 02/080449 



28 



PCT/US02/09835 



CLAIMS 

1 . A method for secure transmissions, the method comprising: 

2 determining a registration key specific to a participant in a transmission; 

determining a first key; 
4 encrypting the first key with the registration key; 

determining a second key; 
6 . encrypting the second key with the first key; and 

updating the first and second keys. 

2. The method as in claim 1, wherein updating further comprises: 
2 updating the first key according to a first time period; and 

updating the second key according to a second time period, wherein the 
4 second time period is less than the first time period. 

3. The method as in claim 2, wherein updating further comprises: 
2 encrypting an updated first key with the registration key ; and 

encrypting an updated second key with the updated first key. 

4. The method as in claim 2, further comprising: 

2 encrypting a broadcast stream of information using the second key; and 

transmitting the encrypted broadcast stream of information. 

5. The method as in claim 4, wherein the broadcast stream of information 
2 comprises video information. 

6. The method as in claim 4, wherein the broadcast stream of information 
2 comprises Internet Protocol packets. 

7. The method as in claim 3, further comprising: 

2 calculating a registration key information message; and 

transmitting the registration key information message. 
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8. The method as in claim 7, further comprising: 

calculating a first key information message corresponding to the updated 

and encrypted first key; and 
transmitting the first key information message. 



4 



2 



9. The method as in claim 8, further comprising: 

calculating a second key information message corresponding to the 

updated and encrypted second key; and 
transmitting the second key information message. 



10. The method as in claim 1, further comprising: 
2 transmitting the encrypted first key; and 

transmitting the encrypted second key. 

11 .A method for secure reception of a transmission, the method comprising: 
2 receiving a registration key specific to a participant in a transmission; 

receiving a first key; 
4 decrypting the first key with the registration key; 

receiving a second key; 
6 decrypting the second key with the first key; 

receiving a broadcast stream of information; and 
8 decrypting the broadcast stream of information using the second key. 

12. The method as in claim 1 1 , further comprising: 

2 storing the first key in a secure memory storage unit; and 

storing the second key in a memory storage unit. 

13. The method as in claim 1 1 , further comprising: 

2 recovering the first key from a first key information message; and 

recovering the second key from a second key information message. 

14. The method as in claim 1 1 , further comprising: 

2 updating the first key according to a first time period; and 



updating the second key according to a second time period. 
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15. In a wireless communication system supporting a broadcast service option, 
2 an infrastructure element comprising: 

a receive circuitry; 

4 a user identification unit, operative to recover a short-time key for 

decrypting a broadcast message, comprising: 
6 processing unit operative to decrypt key information; 

memory storage unit for storing a registration key; and 
8 a mobile equipment unit adapted to apply the short-time key for 

decrypting the broadcast message. 

16. The infrastructure element as in claim 15, wherein the short-time key is 
2 processed by the user identification unit and passed to the mobile equipment 

unit. 

17. The infrastructure element as in claim 15, wherein the memory storage unit 
2 is a secure memory storage unit. 

18. The infrastructure element as in claim 15, wherein the memory storage unit 
2 stores a broadcast access key, and wherein the processing unit decrypts the 

short-time key using the broadcast access key. 

19. The infrastructure element as in claim 18, wherein the short-time key is 
2 updated at a first frequency. 

20. The infrastructure element as in claim 19, wherein the broadcast access key 
2 is updated at a second frequency less than the first frequency. 

21. The infrastructure element as in claim 15, wherein the broadcast service 
2 option is a video service. 



2 



22. A wireless communication system, comprising: 

means for determining a registration key specific to a participant in a 
transmission; 
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4 means for determining a first key; 

means for encrypting the first key with the registration key; 
6 means for determining a second key; 

means for encrypting the second key with the first key; and 
8 means for updating the first and second keys. 



23. An infrastructure element, comprising: 
2 means for receiving a registration key specific to a participant in a 

transmission; 
4 means for receiving a first key; 

means for decrypting the first key with the registration key; 
6 means for receiving a second key; 

means for decrypting the second key with the first key; 
8 means for receiving a broadcast stream of information; and 

means for decrypting the broadcast stream of information using the 
10 second key. 



24. A digital signal storage device, comprising: 
2 first set of instructions for receiving a registration key specific to a 

participant in a transmission; 
4 second set of instructions for receiving a first key; 

third set of instructions for decrypting the first key with the registration 
6 key; 

fourth set of instructions for receiving a second key; 
8 fifth set of instructions for decrypting the second key with the first key; 

sixth set of instructions for receiving a broadcast stream of information; 
10 and 

seventh set of instructions for decrypting the broadcast stream of 
12 information using the second key. 
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(57) Abstract: Method and apparatus for 
secure transmissions. Each user is provided a 
registration key, A long-time updated broadcast 
key is encrypted using the registration key and 
provided periodically to a user. A short-time 
updatedkey is encrypted using the broadcast 
key. The short-time key is available with each 
broadcast message, wherein sufficient information 
to calculate the short-time key is provided in an 
Internet protocol hcaderprcceding the broadcast 
content. Broadcasts are then encrypted using 
the short-time key, wherein the user decrypts the 
broadcast message using the short-time key. 
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METHOD AND APPARATUS FOR SECURITY IN A DATA 
PROCESSING SYSTEM 

BACKGROUND 

Field 

[1000] The present invention relates to data processing systems generally 
and specifically, to methods and apparatus for security in a data processing 
system. 

Background 

[1001] Security in data processing and information systems, including 
communications systems, contributes to accountability, fairness, accuracy, 
confidentiality, operability, as well as a plethora of other desired criteria. 
Encryption, or the general field of cryptography, is used in electronic commerce, 
wireless communications, broadcasting, and has an unlimited range of 
applications. In electronic commerce, encryption is used to prevent fraud in and 
to verify financial transactions, in data processing systems, encryption is used 
to verify a participant's identity. Encryption is also used to prevent hacking, 
protect Web pages, and prevent access to confidential documents, as well as a 
variety of other security measures. 

[1002] Systems employing cryptography, often referred to as cryptosystems, 
can be partitioned into symmetric cryptosystems and asymmetric 
cryptosystems. A symmetric encryption system uses a same key (i.e., the 
secret key) to encrypt and decrypt a message. Whereas an asymmetric 
encryption system uses a first key (i.e., the public key) to encrypt a message 
and uses a second, different key (i.e., the private key) to decrypt it. Asymmetric 
cryptosystems are also called public key cryptosystems. A problem exists in 
symmetric cryptosystems in the secure provision of the secret key from a 
sender to a recipient. Further, a problem exists when keys or other encryption 
mechanisms are updated frequently. In a data processing system, methods of 
securely updating keys incur additional processing time, memory storage and 
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other processing overhead. In a wireless communication system, updating keys 
uses valuable bandwidth otherwise available for transmission. 
[1003] The prior art does not provide a method for updating keys to a large 
group of mobile stations in order that they may access an encrypted broadcast. 
There is a need, therefore, for a secure and efficient method of updating keys in 
a data processing system. Further, there is a need for a secure and efficient 
method of updating keys in a wireless communication system. 

SUMMARY 

[1004] Embodiments disclosed herein address the above stated needs by 
providing a method for security in a data processing system. In one aspect, a 
method for secure transmissions includes determining a short term key for a 
message for transmission, wherein the short term key has a short term key 
identifier, determining an access key for the message, wherein the access key 
has an access key identifier, encrypting the message with the access key, 
forming an Internet protocol header comprising the short term key identifier, and 
transmitting the encrypted message with the Internet protocol header. 
[1005] In another aspect, in a wireless communication system supporting a 
broadcast service option, an infrastructure element includes a receive circuitry, 
a user identification unit, operative to recover a short-time key for decrypting a 
broadcast message, and a mobile equipment unit adapted to apply the short- 
time key for decrypting the broadcast message. The user identification unit 
including a processing unit operative to decrypt key information. The mobile 
equipment unit including a memory storage unit for storing a plurality of short 
term keys and short term key identifiers. 

[1006] In still another aspect, a digital signal storage device includes a first 
set of instructions for receiving a short term key identifier specific to a 
transmission, the short term key identifier corresponding to a short term key, a 
second set of instructions for determining an access key based on the short 
term key identifier, a third set of instructions for encrypting the short term key 
identifier with the access key to recover the short term key, and a fourth set of 
instructions for decrypting the transmission using the short term key. 
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BRIEF DESCRIPTION OF THE DRAWINGS 



[1 007] FIG. 1 A is a diagram of a cryptosystem. 

[1 008] FIG. 1 B is a diagram of a symmetric cryptosystem. 

[1 009] FIG. 1 C is a diagram of an asymmetric cryptosystem. 

[1010] FIG. 1D is a diagram of a PGP encryption system. 

[1011] FIG. 1 E is a diagram of a PGP decryption system. 

[1012] FIG. 2 is a diagram of a spread spectrum communication system that 

supports a number of users. 

[1013] FIG. 3 is a block diagram of the communication system supporting 
broadcast transmissions. 

[1014] FIG. 4 is a block diagram of a mobile station in a wireless 
communication system. 

[1015] FIGs. 5A and 5B illustrate models describing the updating of keys 

within a mobile station used for controlling broadcast access. 

[1016] FIG. 6 is a model describing cryptographic operations within a UIM. 

[1017] FIGs. 7A-7D illustrate a method of implementing security encryption 

in a wireless communication system supporting broadcast transmissions. 

[1018] FIG. 7E is a timing diagram of key update periods of a security option 

in a wireless communication system supporting broadcast transmissions. 

[1019] FIGs. 8A-8D illustrate application of a security encryption method in a 

wireless communication system supporting broadcast transmissions. 

[1020] FIG. 9A illustrates the format of an IPSec packet for an Internet 

Protocol transmission. 

[1021] FIG. 9B illustrates a Security Association Identifier or SPI as 
applicable to an IPSec packet. 

[1022] FIG. 9C illustrates a memory storage device for storing SPI 
information in a mobile station, 

[1023] FIG. 9D illustrates a memory storage device for storing Broadcast 
Access Keys (BAKs) in a mobile station. 
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[1024] FIGs. 10 and 11 illustrate a method for providing security for a 
broadcast message in a wireless communication system. 
[1025] FIG. 12A illustrates a Security Association Identifier or SPI as 
applicable to an IPSec packet. 

[1026] FIG. 12B illustrates a memory storage device for storing SPI 
information in a mobile station. 

[1027] FIG. 13 and 14 illustrate a method for providing security for a 
broadcast message in a wireless communication system. 

DETAILED DESCRIPTION 

[1028] The word "exemplary" is used exclusively herein to mean "serving as 
an example, instance, or illustration." Any embodiment described herein as 
"exemplary" is not necessarily to be construed as preferred or advantageous 
over other embodiments. 

[1029] Wireless communication systems are widely deployed to provide 
various types of communication such as voice, data, and so on. These systems 
may be based on code division multiple access (CDMA), time division multiple 
access (TDM A), or some other modulation techniques. A CDMA system 
provides certain advantages over other types of system, including increased 
system capacity. 

[1030] A system may be designed to support one or more standards such as 
the "TIA/ElA/IS-95-B Mobile Station-Base Station Compatibility Standard for 
Dual-Mode Wideband Spread Spectrum Cellular System" referred to herein as 
the IS-95 standard, the standard offered by a consortium named "3rd 
Generation Partnership Project" referred to herein as 3GPP, and embodied in a 
set of documents including Document Nos. 3G TS 25.211, 3G TS 25.212, 3G 
TS 25.213, and 3G TS 25.214, 3G TS 25.302, referred to herein as the W- 
CDMA standard, the standard offered by a consortium named "3rd Generation 
Partnership Project 2" referred to herein as 3GPP2, and TR-45.5 referred to 
herein as the cdma2000 standard, formerly called IS-2000 MC. The standards 
cited hereinabove are hereby expressly incorporated herein by reference. 
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[1031] Each standard specifically defines the processing of data for 
transmission from base station to mobile, and vice versa. As an exemplary 
embodiment the following discussion considers a spread-spectrum 
communication system consistent with cdma2000 systems. Alternate 
embodiments may incorporate another standard/system. Still other 
embodiments may apply the security methods disclosed herein to any type of 
data processing system using a cryptosystem. 

[1032] A cryptosystem is a method of disguising messages that allows a 
specific group of users to extract the message. FIG. 1A illustrates a basic 
cryptosystem 10. Cryptography is the art of creating and using cryptosystems. 
Cryptanalysis is the art of breaking cryptosystems, i.e., receiving and 
understanding the message when you are not within the specific group of users 
allowed access to the message. The original message is referred to as a 
plaintext message or plaintext. The encrypted message is called a ciphertext, 
wherein encryption includes any means to convert plaintext into ciphertext. 
Decryption includes any means to convert ciphertext into plaintext, i.e., recover 
the original message. As illustrated in FIG. 1A, the plaintext message is 
encrypted to form a ciphertext. The ciphertext is then received and decrypted to 
recover the plaintext. While the terms plaintext and ciphertext generally refer to 
data, the concepts of encryption may be applied to any digital information, 
including audio and video data presented in digital form. While the description 
of the invention provided herein uses the term plaintext and ciphertext 
consistent with the art of cryptography, these terms do not exclude other forms 
of digital communications. 

[1033] A cryptosystem is based on secrets. A group of entities shares a 
secret if an entity outside this group cannot obtain the secret without 
significantly large amount of resources. 

[1034] A cryptosystem may be a collection of algorithms, wherein each 
algorithm is labeled and the labels are called keys. A symmetric encryption 
system, often referred to as a cryptosystem, uses a same key (i.e., the secret 
key) to encrypt and decrypt a message. A symmetric encryption system 20 is 
illustrated in FIG. 1B, wherein both the encryption and decryption utilize a same 
private key. 
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[1035] In contrast, an asymmetric encryption system uses a first key (e.g., 
the public key) to encrypt a message and uses a different key (e.g., the private 
key) to decrypt it. FIG. 1C illustrates an asymmetric encryption system 30 
wherein one key is provided for encryption and a second key for decryption. 
Asymmetric cryptosystems are also called public key cryptosystems. The public 
key is published and available for encrypting any message, however, only the 
private key may be used to decrypt the message encrypted with the public key. 
[1036] A problem exists in symmetric cryptosystems in the secure provision 
of the secret key from a sender to a recipient. In one solution, a courier may be 
used to provide the information, or a more efficient and reliable solution may be 
to use a public key cryptosystem, such as a public-key cryptosystem defined by 
Rivest, Shamir, and Adleman (RSA) which is discussed hereinbelow. The RSA 
system is used in the popular security tool referred to as Pretty Good Privacy 
(PGP), wn j c h is further detailed hereinbelow. For instance, an originally 
recorded cryptosystem altered letters in a plaintext by shifting each letter by n in 
the alphabet, wherein n is a predetermined constant integer value. In such a 
scheme, an "A" is replaced with a "D," etc., wherein a given encryption scheme 
may incorporate several different values of a In this encryption scheme V is 
the key. Intended recipients are provided the encryption scheme prior to receipt 
of a ciphertext. In this way, only those knowing the key should be able to 
decrypt the ciphertext to recover the plaintext. However, by calculating the key 
with knowledge of encryption, unintended parties may be able to intercept and 
decrypt the ciphertext, creating a security problem. 

[1037] More complicated and sophisticated cryptosystems employ strategic 
keys that deter interception and decryption from unintended parties. A classic 
cryptosystem employs encryption functions E and decryption functions D such 
that: 

D_K(E_K(P)) = P, for any plaintext P. (1 ) 

[1038] In a public-key cryptosystem, E_K is easily computed from a known 
"public key" Y which in turn is computed from K. The public key Yis published, 
so that anyone can encrypt messages. The decryption function DJ< is 
computed from public key V, but only with knowledge of a private key K. 
Without the private key Kan unintended recipient may not decrypt the ciphertext 
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so generated, in this way only the recipient who generated K can decrypt 
messages. 

[1039] RSA is a public-key cryptosystem defined by Rivest, Shamir, and 
Adleman, wherein, for example, plaintexts consider positive integers up to 2 512 . 
Keys are quadruples (p,q,e,d), with p given as a 256-bit prime number, q as a 
258-bit prime number, and d and e large numbers with {de - 1) divisible by (p- 
1 ). Further, define the encryption function as: 

E_K(P) = P e mod pq, D_K(C) = C d mod pq. (2) 
[1040] While, E_K is easily computed from the pair (pq,e), there is no known 
simple way to compute D_K from the pair (pq,e). Therefore, the recipient that 
generates K can publish (pq,e). It is possible to send a secret message to the 
recipient as he is the one able to read the message. 

[1041] PGP combines features from symmetric and asymmetric encryption. 
FIGs. 1D and 1E illustrate a PGP cryptosystem 50, wherein a plaintext message 
is encrypted and recovered. In FIG. 1D, the plaintext message is compressed 
to save modem transmission time and disk space. Compression strengthens 
cryptographic security by adding another level of translation to the encrypting 
and decrypting processing. Most cryptanalysis techniques exploit patterns 
found in the plaintext to crack the cipher. Compression reduces these patterns 
in the plaintext, thereby enhancing resistance to cryptanalysis. Note that one 
embodiment does not compress: plaintext, or other messages that are too short 
to compress, or which don't compress well. 

[1042] PGP then creates a session key, which is a one-time-only secret key. 
This key is a random number that may be generated from any random event(s), 
such as random movements of a computer mouse and/or the keystrokes while 
typing. The session key works with a secure encryption algorithm to encrypt the 
plaintext, resulting in ciphertext. Once the data is encrypted, the session key is 
then encrypted to the recipient's public key. The public key-encrypted session 
key is transmitted along with the ciphertext to the recipient. 
[1043] For decryption, as illustrated in FIG. 1E, the recipient's copy of PGP 
uses a private key to recover the temporary session key, which PGP then uses 
to decrypt the conventionally encrypted ciphertext. The combination of 
encryption methods takes advantage of the convenience of public key 
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encryption and the speed of symmetric encryption. Symmetric encryption is 
generally much faster than public key encryption. Public key encryption in turn 
provides a solution to key distribution and data transmission issues. In 
combination, performance and key distribution are improved without any 
sacrifice in security. 

[1044] A key is a value that works with a cryptographic algorithm to produce 
a specific ciphertext. Keys are basically very large numbers. Key size is 
measured in bits. In public key cryptography, security increases with key size, 
however, public key size and the symmetric encryption private key size are not 
generally related. While the public and private keys are mathematically related, 
a difficulty arises in deriving a private key given only a public key. Deriving the 
private key is possible given enough time and computing power, making the 
selection of key size an important security issue. The optimal goal is to 
maximize the size of the key for security concerns, while minimizing key size to 
facilitate quick processing. Larger keys will be cryptographically secure for a 
longer period of time. An additional consideration is the expected interceptor, 
specifically: 1) what is the importance of a message to a third party; and 2) how 
much resource will a third party have to decrypt the message. 
[1045] Note that keys are stored in encrypted form. PGP specifically stores 
keys in two files: one for public keys and one for private keys. These files are 
called keyrings. In application, a PGP encryption system adds the public keys 
of target recipients to the sender's public keyring. The sender's private keys are 
stored on the sender's private keyring. 

[1046] As discussed in the examples given hereinabove, the method of 
distributing the keys used for encryption and decryption can be complicated. 
The "key exchange problem" involves first ensuring that keys are exchanged 
such that both the sender and receiver can perform encryption and decryption, 
respectively, and for bi-directional communication, such that the sender and 
receiver can both encrypt and decrypt messages. Further, it is desired that key 
exchange be performed so as to preclude interception by a third and 
unintended party. 

[1047] Finally, an additional consideration is authentication, providing 
' assurance to the receiver that a message was encrypted by an intended sender 
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and not a third party. In a private key exchange system, the keys are 
exchanged secretly providing improved security upon successful key exchange 
and valid authentication. Note that the private key encryption scheme implicitly 
provides authentication. The underlying assumption in a private key 
cryptosystem is that only the intended sender will have the key capable of 
encrypting messages delivered to the intended receiver. While public-key 
cryptographic methods solve a critical aspect of the 'key-exchange problem', 
specifically their resistance to analysis even with the presence a passive 
eavesdropper during exchange of keys, still, they do not solve all problems 
associated with key exchange. In particular, since the keys are considered 
"public knowledge' (particularly with RSA), some other mechanism is desired to 
provide authentication. Authentication is desired as possession of keys alone, 
while sufficient to encrypt messages, is no evidence of a particular unique 
identity of the sender, nor is possession of a corresponding decryption key by 
itself sufficient to establish the identity of the recipient. 

[1048] One solution is to develop a key distribution mechanism that assures 
that listed keys are actually those of the given entities, sometimes called a 
trusted authority, certificate authority, or third part escrow agent. The authority 
typically does not actually generate keys, but does ensure that the lists of keys 
and associated identities kept and advertised for reference by senders and 
receivers are correct and not compromised. Another method relies on users to 
distribute and track each other's keys and trust in an informal, distributed 
fashion. Under RSA, if a user wishes to send evidence of their identity in 
addition to an encrypted message, a signature is encrypted with the private key. 
The receiver can use the RSA algorithm in reverse to verify that the information 
decrypts, such that only the sender could have encrypted the plaintext by use of 
the secret key. Typically the encrypted 'signature' is a "message digest' that 
comprises a unique mathematical 'summary' of the secret message (if the 
signature were static across multiple messages, once known previous receivers 
could use it falsely). In this way, theoretically, only the sender of the message 
could generate a valid signature for that message, thereby authenticating it for 
the receiver. 
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[1049] A message digest is often computed using a cryptographic hash 
function. A cryptographic hash function computes a value (with a fixed number 
of bits) from any input, regardless of the length of the input. One property of a 
cryptographic hash function is this: given an output value, it is computationally 
difficult to determine an input that will result in that output. An example of a 
cryptographic hash function is SHA-1 as described in "Secure Hash Standard," 
FIPS PUB 180-1, promulgated by the Federal Information Processing 
Standards Publications (FIPS PUBS) and issued by the National Institute of 
Standards and Technology. 

[1050] FIG. 2 serves as an example of a communications system 100 that 
supports a number of users and is capable of implementing at least some 
aspects and embodiments of the invention. Any of a variety of algorithms and 
methods may be used to schedule transmissions in system 100. System 100 
provides communication for a number of cells 102A through 102G, each of 
which is serviced by a corresponding base station 104A through 104G, 
respectively. In the exemplary embodiment, some of base stations 104 have 
multiple receive antennas and others have only one receive antenna. Similarly, 
some of base stations 104 have multiple transmit antennas, and others have 
single transmit antennas. There are no restrictions on the combinations of 
transmit antennas and receive antennas. Therefore, it is possible for a base 
station 104 to have multiple transmit antennas and a single receive antenna, or 
to have multiple receive antennas and a single transmit antenna, or to have 
both single or multiple transmit and receive antennas. 

[1051] Terminals 106 in the coverage area may be fixed (i.e., stationary) or 
mobile. As shown in FIG. 2, various terminals 106 are dispersed throughout 
the system. Each terminal 106 communicates with at least one and possibly 
more base stations 104 on the downlink and uplink at any given moment 
depending on, for example, whether soft handoff is employed or whether the 
terminal is designed and operated to (concurrently or sequentially) receive 
multiple transmissions from multiple base stations. Soft handoff in CDMA 
communications systems is well known in the art and is described in detail in 
U.S. Patent No. 5,101,501, entitled "Method and system for providing a Soft 
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Handoff in a CDMA Cellular Telephone System", which is assigned to the 
assignee of the present invention. 

[1052] The downlink refers to transmission from the base station to the 
terminal, and the uplink refers to transmission from the terminal to the base 
station. In the exemplary embodiment, some of terminals 106 have multiple 
receive antennas and others have only one receive antenna. In FIG. 2, base 
station 104A transmits data to terminals 106A and 106J on the downlink, base 
station 104B transmits data to terminals 106B and 106J, base station 104C 
transmits data to terminal 106C, and so on. 

[1053] Increasing demand for wireless data transmission and the expansion 
of services available via wireless communication technology have led to the 
development of specific data services. One such service is referred to as High 
Data Rate (HDR). An exemplary HDR service is proposed in "EIA/TIA-IS856 
cdma2000 High Rate Packet Data Air Interface Specification" referred to as "the 
HDR specification." HDR service is generally an overlay to a voice 
communication system that provides an efficient method of transmitting packets 
of data in a wireless communication system. As the amount of data transmitted 
and the number of transmissions increases, the limited bandwidth available for 
radio transmissions becomes a critical resource. There is a need, therefore, for 
an efficient and fair method of scheduling transmissions in a communication 
system that optimizes use of available bandwidth. In the exemplary 
embodiment, system 100 illustrated in FIG. 2 is consistent with a CDMA type 
system having HDR service. 

[1054] According to one embodiment, the system 100 supports a high-speed 
multimedia broadcasting service referred to as High-Speed Broadcast Service 
(HSBS). An example application for HSBS is video streaming of movies, sports 
events, etc. The HSBS service is a packet data service based on the internet 
Protocol (IP). According to the exemplary embodiment, a service provider 
indicates the availability of such high-speed broadcast service to the users. The 
users desiring the HSBS service subscribe to receive the service and may 
discover the broadcast service schedule through advertisements, Short 
Management System (SMS), Wireless Application Protocol (WAP), etc. Mobile 
users are referred to as Mobile Stations (MSs). Base Stations (BSs) transmit 
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HSBS related parameters in overhead messages. When an MS desires to 
receive the broadcast session, the MS reads the overhead messages and 
learns the appropriate configurations. The MS then tunes to the frequency 
containing the HSBS channel, and receives the broadcast service content. 
[1055] The service being considered is a high-speed multimedia 
broadcasting service. This service is referred to as High-Speed Broadcast 
Service (HSBS) in this document. One such example is video streaming of 
movies, sports events, etc. This service will likely be a packet data service 
based on the Internet Protocol (IP). 

[1056] The service provider will indicate the availability of such high-speed 
broadcast service to the users. The mobile station users who desire such 
service will subscribe to receive this service and may discover the broadcast 
service schedule through advertisements, SMS, WAP, etc. Base stations will 
transmit broadcast service related parameters in overhead messages. The 
mobiles that wish to listen to the broadcast session will read these messages to 
determine the appropriate configurations, tune to the frequency containing the 
high-speed broadcast channel, and start receiving the broadcast service 
content. 

[1057] There are several possible subscription/revenue models for HSBS 
service, including free access, controlled access, and partially controlled 
access. For free access, no subscription is needed by the mobiles to receive 
the service. The BS broadcasts the content without encryption and interested 
mobiles can receive the content. The revenue for the service provider can be 
generated through advertisements that may also be transmitted in the broadcast 
channel. For example, upcoming movie-clips can be transmitted for which the 
studios will pay the service provider. 

[1058] For controlled access, the MS users subscribe to the service and pay 
the corresponding fee to receive the broadcast service. Users that are not 
subscribed to the service are not able to receive the HSBS service. Controlled 
access can be achieved by encrypting the HSBS transmission/content so that 
only the subscribed users can decrypt the content. This may use over-the-air 
encryption key exchange procedures. This scheme provides strong security 
and prevents theft-of-service. 



